last executing test programs: 6.024183742s ago: executing program 0 (id=2532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001b80)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r4, &(0x7f00000004c0)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/4545], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001ec0)=@framed={{}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x80000) read(r6, &(0x7f0000001bc0)=""/243, 0xf3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) 5.776756728s ago: executing program 0 (id=2539): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f00000004c0)="1c00000018002551075c0165ff0ffc02802000030011000500e1", 0x1a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000540)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000940)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) write(r6, &(0x7f0000000c00)="05000000010001", 0x7) bind$bt_hci(r5, &(0x7f0000000c40)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000c80)="07000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000ec0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000f00)='GPL\x00', 0x8, 0xc3, &(0x7f0000000f40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) sendmmsg$inet(r0, &(0x7f0000001040), 0x4000095, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r7, &(0x7f0000001100)=[{{&(0x7f0000001140)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000001740)=""/55, 0x37}}], 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 5.70461543s ago: executing program 4 (id=2541): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffeffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfeffffff, 0xffffffff, 0xffffffff, 0x5, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x12, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x1869d, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xb, 0x0, 0x0, 0x1}, {0x480, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x24000, 0x0, 0x0, 0x1}, {0x20, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0) io_setup(0x7, &(0x7f0000000480)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000004c0)='/sys/power/wakeup_count', 0x89443, 0xf1) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x240, r2, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x8, r2, 0x0, 0x0, 0x9, 0x0, 0x1, r2}]) syz_mount_image$ext4(&(0x7f00000007c0)='ext3\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0xff, 0x44d, &(0x7f0000000880)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000d00)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000e40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x6) semget(0x1, 0x5, 0x6b4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000f80)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 3.918675944s ago: executing program 3 (id=2546): socket$netlink(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x12, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="550a0000000000006111340000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x28642, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)) ioctl$TIOCMGET(r1, 0x5415, 0x0) 3.912405684s ago: executing program 0 (id=2556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r10, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffeffff, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x3e, 0xc, 0x400, 0x4, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0xfffffffe, 0xc, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x400001, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0xa, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x7, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.146580523s ago: executing program 4 (id=2549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001b80)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r4, &(0x7f00000004c0)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001ec0)=@framed={{}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x80000) read(r6, &(0x7f0000001bc0)=""/243, 0xf3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) 3.052612965s ago: executing program 2 (id=2550): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.941339168s ago: executing program 3 (id=2551): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x3261e) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 2.760318732s ago: executing program 2 (id=2552): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) 2.679961214s ago: executing program 4 (id=2553): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x29, 0xff, 0x6, 0x99f, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x7, 0x1}}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="e00000017f0000010000000014000000000000000000000002000000001000000000000011000000000000000000000001000000ae00000000000000"], 0x150}, 0x20004000) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0xf4240}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x39}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9, 0x40, 0x80, 0x100, 0x2, 0x408c00b8, r1}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000024c0)) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000001200), 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r5, 0x107, 0x9, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, 0x0) connect$bt_sco(r4, &(0x7f00000012c0), 0x8) shutdown(r4, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001300)='ip6tnl0\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, 0x0) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) preadv2(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, 0x5a, 0xb, 0x17) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002480)=0x1) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 2.605554176s ago: executing program 0 (id=2554): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) unshare(0x22020600) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f00000001c0)=""/80, &(0x7f0000000240)=""/82}) syz_usb_control_io(r0, &(0x7f00000025c0)={0x2c, &(0x7f0000002400)={0x20, 0x22, 0x1a, {0x1a, 0x6, "08d9be23d48447a1940cafc73b98a0daa88fce3622641485"}}, &(0x7f0000002440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000002480)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x7, 0x4}, @generic={0x84, 0x10, 0x4, "0cbd2228cc1f5ccb7562105a2a4802e397e8f3cab368f3de958f8dbdb831f699c53168af7874f5d1186dd20522cd8f31eaead089bd4d2c89d9fa97472ba1f449df16492c4f20b5f9acf6b3bd951704c41978caa5b7f997206e1eb7328f6f21e857057611fe11fe40a95ef9a433989451e09b497033948ae9791f171b672b583c6f"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x0, 0x1ff}]}}, &(0x7f0000002540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x6a, "e4f231fc", "13ae84aa"}}, &(0x7f0000002580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf1, 0x60, 0x9, 0x4, 0x97, 0xed, 0xc000}}}, &(0x7f0000002ac0)={0x84, &(0x7f0000002600)={0x40, 0x30, 0xe4, "12c6c4bad0db9fb903d1d17a994c8244bef2db97fd5bbadf15ff836d88d8de3eab5b3b0a2a677b0ec0d33a119b886f0575f52f576b89276a70a208fceea7d5ffe71b776958a05e6eaf175f8bfe9582cb1aa116c7a0507c10802bfc163e7566324e5c75ff1eb32003812b0aa0a11404646a16707dd49b61339d070830550347db363432acda9e2499a340114f9768f0b5ffbc0a7cc17ea6df3d3d9ba14070e9bcd6f90b08ae02d1e142b915b85a857ea75f7786e7d8e45457b98bb0e7378db9cf3009a10dc9e7ff0700f5d8b646383fb2853ecd66f69d9c91c6d29898bcdfd07e34b73dd2"}, &(0x7f0000002700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002780)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000027c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000002800)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000002840)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002880)={0x40, 0xb, 0x2, '!0'}, &(0x7f00000028c0)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000002900)={0x40, 0x13, 0x6, @random="cad96089df22"}, &(0x7f0000002940)={0x40, 0x17, 0x6, @random="b7a3f5f27805"}, &(0x7f0000002980)={0x40, 0x19, 0x2, "39fe"}, &(0x7f00000029c0)={0x40, 0x1a, 0x2, 0xb4c0}, &(0x7f0000002a00)={0x40, 0x1c, 0x1, 0x48}, &(0x7f0000002a40)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000002a80)={0x40, 0x21, 0x1, 0xe}}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000300)=0x1) 2.278838924s ago: executing program 2 (id=2555): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, r4, 0x0) syz_ublk_add_dev(r3, 0x0, 0x0, r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.200997166s ago: executing program 3 (id=2557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0xfffffdf2}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000740)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) 1.953063192s ago: executing program 2 (id=2559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019b80)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0xfffffffb, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x4000009, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x26, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0xf56e, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x4, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x43ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0x800ff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x2, 0x3fed, 0x2, 0x1, 0x2, 0x8, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e2, 0x2, 0x2, 0x5, 0x8, 0x1, 0x8, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0x5, 0x7f, 0xe, 0x1, 0x3, 0xfff, 0x5, 0x7, 0x400000, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xfb, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x40000000, 0x3ff, 0x3, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x9, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x1, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x4, 0x5, 0x8, 0xffffff7d, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.950189462s ago: executing program 4 (id=2560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000001480)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000001380)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000012c0)={@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1e}, @fda={0x66646185, 0x9, 0x1, 0x31}}, &(0x7f0000001340)={0x0, 0x18, 0x40}}}]}) 1.944281962s ago: executing program 3 (id=2561): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x402, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000a40)=[@increfs]}) 1.744006917s ago: executing program 1 (id=2563): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.725421177s ago: executing program 3 (id=2564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001b80)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r4, &(0x7f00000004c0)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/4545], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001ec0)=@framed={{}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x80000) read(r6, &(0x7f0000001bc0)=""/243, 0xf3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) 1.719858128s ago: executing program 4 (id=2565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendto$packet(r7, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, 0x0, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffeffff, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x3e, 0xc, 0x400, 0x4, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0xfffffffe, 0xc, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x400001, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0xa, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x7, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.576934071s ago: executing program 0 (id=2566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000100)={0x0, &(0x7f0000000180)}) futimesat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0) 1.527585073s ago: executing program 1 (id=2567): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x3261e) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 1.526583353s ago: executing program 3 (id=2568): syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000e40)=""/173) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x4008031, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) 1.135435732s ago: executing program 1 (id=2569): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4076cbba9945d516, &(0x7f0000000500)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x74) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="2f0000008db22f"], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vlan0\x00'}) 1.051900254s ago: executing program 2 (id=2570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x4, 0x0, &(0x7f0000000240)}) 564.140656ms ago: executing program 4 (id=2571): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x29, 0xff, 0x6, 0x99f, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x7, 0x1}}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="e00000017f0000010000000014000000000000000000000002000000001000000000000011000000000000000000000001000000ae00000000000000"], 0x150}, 0x20004000) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0xf4240}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x39}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9, 0x40, 0x80, 0x100, 0x2, 0x408c00b8, r1}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f00000024c0)) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000001200), 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r5, 0x107, 0x9, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, 0x0) connect$bt_sco(r4, &(0x7f00000012c0), 0x8) shutdown(r4, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001300)='ip6tnl0\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, 0x0) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) preadv2(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, 0x5a, 0xb, 0x17) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002480)=0x1) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 436.401689ms ago: executing program 0 (id=2572): socket$packet(0x11, 0x2, 0x300) socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019b80)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0xfffffffb, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x4000009, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x26, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0xf56e, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x4, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x43ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0x800ff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x2, 0x3fed, 0x2, 0x1, 0x2, 0x8, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e2, 0x2, 0x2, 0x5, 0x8, 0x1, 0x8, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0x5, 0x7f, 0xe, 0x1, 0x3, 0xfff, 0x5, 0x7, 0x400000, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xfb, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x40000000, 0x3ff, 0x3, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x9, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x1, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x4, 0x5, 0x8, 0xffffff7d, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f000001a400)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f000001a440)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f000001a480)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f000001a4c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 360.275201ms ago: executing program 1 (id=2573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0xfffffdf2}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000740)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) 277.983533ms ago: executing program 2 (id=2574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x4, 0x400, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 140.726287ms ago: executing program 1 (id=2575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xdc}}, 0x0) 0s ago: executing program 1 (id=2576): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) unshare(0x22020600) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/33, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f00000001c0)=""/80, &(0x7f0000000240)=""/82}) syz_usb_control_io(r0, &(0x7f00000025c0)={0x2c, &(0x7f0000002400)={0x20, 0x22, 0x1a, {0x1a, 0x6, "08d9be23d48447a1940cafc73b98a0daa88fce3622641485"}}, &(0x7f0000002440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000002480)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x7, 0x4}, @generic={0x84, 0x10, 0x4, "0cbd2228cc1f5ccb7562105a2a4802e397e8f3cab368f3de958f8dbdb831f699c53168af7874f5d1186dd20522cd8f31eaead089bd4d2c89d9fa97472ba1f449df16492c4f20b5f9acf6b3bd951704c41978caa5b7f997206e1eb7328f6f21e857057611fe11fe40a95ef9a433989451e09b497033948ae9791f171b672b583c6f"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x0, 0x1ff}]}}, &(0x7f0000002540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x6a, "e4f231fc", "13ae84aa"}}, &(0x7f0000002580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf1, 0x60, 0x9, 0x4, 0x97, 0xed, 0xc000}}}, &(0x7f0000002ac0)={0x84, &(0x7f0000002600)={0x40, 0x30, 0xe4, "12c6c4bad0db9fb903d1d17a994c8244bef2db97fd5bbadf15ff836d88d8de3eab5b3b0a2a677b0ec0d33a119b886f0575f52f576b89276a70a208fceea7d5ffe71b776958a05e6eaf175f8bfe9582cb1aa116c7a0507c10802bfc163e7566324e5c75ff1eb32003812b0aa0a11404646a16707dd49b61339d070830550347db363432acda9e2499a340114f9768f0b5ffbc0a7cc17ea6df3d3d9ba14070e9bcd6f90b08ae02d1e142b915b85a857ea75f7786e7d8e45457b98bb0e7378db9cf3009a10dc9e7ff0700f5d8b646383fb2853ecd66f69d9c91c6d29898bcdfd07e34b73dd2"}, &(0x7f0000002700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002780)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000027c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000002800)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000002840)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002880)={0x40, 0xb, 0x2, '!0'}, &(0x7f00000028c0)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000002900)={0x40, 0x13, 0x6, @random="cad96089df22"}, &(0x7f0000002940)={0x40, 0x17, 0x6, @random="b7a3f5f27805"}, &(0x7f0000002980)={0x40, 0x19, 0x2, "39fe"}, &(0x7f00000029c0)={0x40, 0x1a, 0x2, 0xb4c0}, &(0x7f0000002a00)={0x40, 0x1c, 0x1, 0x48}, &(0x7f0000002a40)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000002a80)={0x40, 0x21, 0x1, 0xe}}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000300)=0x1) kernel console output (not intermixed with test programs): 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 230.961021][ T4360] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 230.980049][ T4360] usb 4-1: Product: syz [ 230.998348][ T4360] usb 4-1: Manufacturer: syz [ 231.011252][ T4360] usb 4-1: SerialNumber: syz [ 231.040645][ T4360] usb 4-1: config 0 descriptor?? [ 231.060882][ T4360] ch341 4-1:0.0: ch341-uart converter detected [ 232.783407][ T4360] usb 4-1: failed to send control message: -110 [ 232.795568][ T4360] ch341-uart: probe of ttyUSB0 failed with error -110 [ 234.314967][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 234.433567][ T4398] usb 4-1: USB disconnect, device number 4 [ 234.442977][ T4398] ch341 4-1:0.0: device disconnected [ 234.590935][ T6796] binder: 6795:6796 ioctl c0306201 0 returned -14 [ 234.688088][ T6803] binder: BINDER_SET_CONTEXT_MGR already set [ 234.694255][ T6803] binder: 6793:6803 ioctl 4018620d 200000004a80 returned -16 [ 235.494374][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 235.543106][ T6813] netlink: 64 bytes leftover after parsing attributes in process `syz.1.690'. [ 236.094476][ T6836] device batadv0 entered promiscuous mode [ 236.103822][ T6836] device vlan2 entered promiscuous mode [ 236.206119][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 236.231451][ T4350] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 236.429483][ T4350] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 236.459689][ T4350] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 236.471541][ T4350] usb 3-1: Product: syz [ 236.490032][ T4350] usb 3-1: Manufacturer: syz [ 236.520438][ T4350] usb 3-1: SerialNumber: syz [ 236.548766][ T4350] usb 3-1: config 0 descriptor?? [ 236.566990][ T4350] ch341 3-1:0.0: ch341-uart converter detected [ 236.919507][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.704'. [ 237.148534][ T3932] device veth0_macvtap left promiscuous mode [ 237.214740][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.272296][ T6879] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 237.326158][ T6879] Cannot find add_set index 0 as target [ 237.413044][ T6880] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 237.443826][ T4350] usb 3-1: failed to send control message: -71 [ 237.450088][ T4350] ch341-uart: probe of ttyUSB0 failed with error -71 [ 237.498798][ T4350] usb 3-1: USB disconnect, device number 3 [ 237.512145][ T6879] Set syz1 is full, maxelem 2076 reached [ 237.530858][ T4350] ch341 3-1:0.0: device disconnected [ 237.693082][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 238.859200][ T27] audit: type=1800 audit(1792186389.361:24): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.718" name="subclass" dev="configfs" ino=42806 res=0 errno=0 [ 238.976630][ T6921] loop3: detected capacity change from 0 to 512 [ 239.046974][ T6921] ext4: Unknown parameter 'nouser_xattr' [ 239.345868][ T6937] xt_ipcomp: unknown flags 1D [ 239.523002][ T6937] tipc: Enabling of bearer rejected, already enabled [ 239.861258][ T4434] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.881828][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 240.195381][ T4434] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 240.218036][ T4434] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 240.286783][ T6974] binder: 6968:6974 ioctl c0306201 0 returned -14 [ 240.301870][ T6974] binder: BINDER_SET_CONTEXT_MGR already set [ 240.307961][ T6974] binder: 6968:6974 ioctl 4018620d 200000004a80 returned -16 [ 240.989230][ T4434] usb 4-1: Product: syz [ 240.993704][ T4434] usb 4-1: Manufacturer: syz [ 240.998361][ T4434] usb 4-1: SerialNumber: syz [ 241.006073][ T4434] usb 4-1: config 0 descriptor?? [ 241.025599][ T4434] ch341 4-1:0.0: ch341-uart converter detected [ 241.737299][ T6998] loop0: detected capacity change from 0 to 512 [ 241.759092][ T6998] ext4: Unknown parameter 'nouser_xattr' [ 241.927162][ T4434] usb 4-1: failed to send control message: -71 [ 241.937242][ T4434] ch341-uart: probe of ttyUSB0 failed with error -71 [ 241.961019][ T7002] xt_ipcomp: unknown flags 1D [ 241.987400][ T4434] usb 4-1: USB disconnect, device number 5 [ 242.012616][ T4434] ch341 4-1:0.0: device disconnected [ 242.040224][ T7002] tipc: Enabling of bearer rejected, already enabled [ 242.062413][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.740'. [ 242.129633][ T7008] device syzkaller0 entered promiscuous mode [ 242.185123][ T7008] tipc: Enabled bearer , priority 0 [ 242.211673][ T7007] tipc: Resetting bearer [ 242.290917][ T7007] tipc: Disabling bearer [ 242.432905][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 242.560349][ T7022] binder: 7011:7022 ioctl c0306201 0 returned -14 [ 242.575436][ T7022] binder: BINDER_SET_CONTEXT_MGR already set [ 242.581549][ T7022] binder: 7011:7022 ioctl 4018620d 200000004a80 returned -16 [ 243.368082][ T7030] device syzkaller0 entered promiscuous mode [ 243.417975][ T7028] device vlan2 entered promiscuous mode [ 243.503515][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.751'. [ 243.678780][ T7040] loop3: detected capacity change from 0 to 512 [ 243.729231][ T7040] ext4: Unknown parameter 'nouser_xattr' [ 243.783321][ T7043] bridge0: port 3(syz_tun) entered blocking state [ 243.827414][ T7043] bridge0: port 3(syz_tun) entered disabled state [ 243.856436][ T7043] device syz_tun entered promiscuous mode [ 243.886679][ T7043] bridge0: port 3(syz_tun) entered blocking state [ 243.894227][ T7043] bridge0: port 3(syz_tun) entered forwarding state [ 244.027552][ T7052] device syzkaller0 entered promiscuous mode [ 244.089501][ T7052] tipc: Enabled bearer , priority 0 [ 244.127314][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 244.206303][ T7059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.253415][ T7051] tipc: Resetting bearer [ 244.374641][ T7051] tipc: Disabling bearer [ 244.394079][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 244.417167][ T7063] device bridge1 entered promiscuous mode [ 244.480892][ T7068] binder: 7061:7068 ioctl c0306201 0 returned -14 [ 244.496502][ T7068] binder: BINDER_SET_CONTEXT_MGR already set [ 244.502714][ T7068] binder: 7061:7068 ioctl 4018620d 200000004a80 returned -16 [ 244.590600][ T7063] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 244.787068][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 245.147856][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 245.383233][ T7081] device syzkaller0 entered promiscuous mode [ 246.696677][ T27] audit: type=1800 audit(1792186397.201:25): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.771" name="subclass" dev="configfs" ino=43167 res=0 errno=0 [ 246.892411][ T7114] tipc: Enabling of bearer rejected, already enabled [ 247.681831][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 247.893393][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 247.964287][ T7153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.983835][ T7156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.781'. [ 248.016446][ T7156] netlink: 44 bytes leftover after parsing attributes in process `syz.4.781'. [ 248.313429][ T7165] tipc: Enabling of bearer rejected, already enabled [ 248.478477][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 248.647660][ T7178] device syzkaller0 entered promiscuous mode [ 249.048180][ T7193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.796'. [ 249.274689][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 249.398872][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 249.482343][ T7208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.800'. [ 249.640790][ T7219] device vlan2 entered promiscuous mode [ 249.694878][ T7215] loop4: detected capacity change from 0 to 512 [ 249.752891][ T7215] ext4: Unknown parameter 'nouser_xattr' [ 249.908665][ T7226] binder: BINDER_SET_CONTEXT_MGR already set [ 249.914996][ T7226] binder: 7216:7226 ioctl 4018620d 200000004a80 returned -16 [ 250.659630][ T7239] loop1: detected capacity change from 0 to 128 [ 250.663555][ T7236] IPVS: length: 155 != 8 [ 251.825116][ T7261] __nla_validate_parse: 1 callbacks suppressed [ 251.825133][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 251.912704][ T7259] device vlan2 entered promiscuous mode [ 252.056597][ T7267] netlink: 32 bytes leftover after parsing attributes in process `syz.2.822'. [ 252.299669][ T7273] binder: BINDER_SET_CONTEXT_MGR already set [ 252.306124][ T7273] binder: 7262:7273 ioctl 4018620d 200000004a80 returned -16 [ 252.857086][ T4570] bond0: (slave bond_slave_0): interface is now down [ 252.886765][ T4570] bond0: (slave bond_slave_1): interface is now down [ 252.975702][ T4570] bond0: now running without any active interface! [ 254.528880][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 254.547043][ T7303] ip_tables: iptables: counters copy to user failed while replacing table [ 254.604380][ T7307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.834'. [ 254.821591][ T7312] loop1: detected capacity change from 0 to 512 [ 254.850638][ T7312] ext4: Unknown parameter 'nouser_xattr' [ 254.925806][ T7314] binder: BINDER_SET_CONTEXT_MGR already set [ 254.932012][ T7314] binder: 7306:7314 ioctl 4018620d 200000004a80 returned -16 [ 255.721759][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728159][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.903910][ T7328] netlink: 'syz.4.842': attribute type 11 has an invalid length. [ 255.927768][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 256.082377][ T7336] netlink: 72 bytes leftover after parsing attributes in process `syz.3.846'. [ 256.688309][ T7345] loop3: detected capacity change from 0 to 512 [ 256.916792][ T7345] ext4: Unknown parameter 'nouser_xattr' [ 257.299376][ T7358] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.637570][ T7364] binder: BINDER_SET_CONTEXT_MGR already set [ 257.643770][ T7364] binder: 7352:7364 ioctl 4018620d 200000004a80 returned -16 [ 258.467057][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 258.667846][ T7380] loop1: detected capacity change from 0 to 512 [ 258.687035][ T7380] ext4: Unknown parameter 'nouser_xattr' [ 260.146234][ T7405] binder: BINDER_SET_CONTEXT_MGR already set [ 260.152378][ T7405] binder: 7396:7405 ioctl 4018620d 200000004a80 returned -16 [ 260.921949][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'. [ 260.942121][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 260.977622][ T7415] ip_tables: iptables: counters copy to user failed while replacing table [ 265.107539][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 265.141332][ T7498] device bridge_slave_1 left promiscuous mode [ 265.147858][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.190141][ T7498] device bridge_slave_0 left promiscuous mode [ 265.202197][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.337162][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.368533][ T7509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.407195][ T7508] 8021q: VLANs not supported on caif0 [ 265.427304][ T7512] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 265.441625][ T7512] netlink: 152 bytes leftover after parsing attributes in process `syz.1.909'. [ 265.971946][ T7538] ip_tables: iptables: counters copy to user failed while replacing table [ 267.029629][ T7550] device syzkaller1 entered promiscuous mode [ 267.153761][ T7554] device syzkaller0 entered promiscuous mode [ 267.170912][ T7560] 8021q: VLANs not supported on caif0 [ 267.418221][ T7570] device syzkaller0 entered promiscuous mode [ 267.462960][ T7570] tipc: Enabled bearer , priority 0 [ 267.581753][ T7567] tipc: Resetting bearer [ 267.858301][ T7567] tipc: Disabling bearer [ 268.119911][ T7577] netlink: 'syz.3.928': attribute type 9 has an invalid length. [ 268.127836][ T7577] netlink: 'syz.3.928': attribute type 6 has an invalid length. [ 268.812340][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 268.948500][ T7599] device syzkaller0 entered promiscuous mode [ 269.042849][ T7597] tipc: Enabling of bearer rejected, already enabled [ 270.142001][ T7624] netlink: 'syz.3.942': attribute type 9 has an invalid length. [ 270.149776][ T7624] netlink: 'syz.3.942': attribute type 6 has an invalid length. [ 271.322264][ T7653] xt_ipcomp: unknown flags 1D [ 271.394000][ T7650] device syzkaller0 entered promiscuous mode [ 271.467772][ T7653] tipc: Enabling of bearer rejected, already enabled [ 272.832562][ T7674] netlink: 'syz.3.960': attribute type 9 has an invalid length. [ 272.840293][ T7674] netlink: 'syz.3.960': attribute type 6 has an invalid length. [ 273.130806][ T7686] device syzkaller0 entered promiscuous mode [ 273.510179][ T7693] xt_ipcomp: unknown flags 1D [ 273.599628][ T7697] 8021q: VLANs not supported on caif0 [ 273.710877][ T7688] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 273.754743][ T7688] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 273.864756][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 274.003193][ T7710] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 274.050416][ T7688] syz.1.967 (7688) used greatest stack depth: 20080 bytes left [ 274.313500][ T7722] loop0: detected capacity change from 0 to 512 [ 274.332020][ T7722] ext4: Unknown parameter 'nouser_xattr' [ 274.359366][ T7723] device syzkaller0 entered promiscuous mode [ 274.385159][ T7708] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.491858][ T7746] xt_ipcomp: unknown flags 1D [ 275.571405][ T7746] tipc: Enabling of bearer rejected, already enabled [ 275.680100][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 275.710299][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 275.762352][ T7748] ip_tables: iptables: counters copy to user failed while replacing table [ 275.913419][ T7761] device syzkaller0 entered promiscuous mode [ 275.937308][ T7761] tipc: Enabled bearer , priority 0 [ 275.940551][ T7762] loop1: detected capacity change from 0 to 512 [ 275.958469][ T7759] tipc: Resetting bearer [ 275.978111][ T7762] ext4: Unknown parameter 'nouser_xattr' [ 276.047698][ T7759] tipc: Disabling bearer [ 276.957146][ T7778] device syzkaller0 entered promiscuous mode [ 277.445739][ T7792] xt_ipcomp: unknown flags 1D [ 279.352032][ T7812] loop3: detected capacity change from 0 to 512 [ 279.375900][ T7812] ext4: Unknown parameter 'nouser_xattr' [ 279.454178][ T7708] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.513104][ T7832] xt_ipcomp: unknown flags 1D [ 280.540231][ T7832] tipc: Enabling of bearer rejected, already enabled [ 280.567567][ T7836] device syzkaller0 entered promiscuous mode [ 281.011421][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 281.023504][ T7848] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1027'. [ 281.340171][ T7851] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 281.440684][ T7855] loop2: detected capacity change from 0 to 512 [ 281.454163][ T7855] ext4: Unknown parameter 'nouser_xattr' [ 282.508265][ T7874] xt_ipcomp: unknown flags 1D [ 283.192405][ T7856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.248384][ T7856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.738123][ T7856] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.748013][ T7856] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.757334][ T7856] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.766564][ T7856] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.118916][ T7883] device syzkaller0 entered promiscuous mode [ 284.419774][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1042'. [ 284.434726][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1042'. [ 284.462132][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 284.517024][ T7901] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1044'. [ 284.596907][ T7891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1042'. [ 284.616433][ T7891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1042'. [ 284.671857][ T7909] ip_tables: iptables: counters copy to user failed while replacing table [ 284.741071][ T7911] loop0: detected capacity change from 0 to 512 [ 284.749284][ T7911] ext4: Unknown parameter 'nouser_xattr' [ 285.679330][ T7915] xt_ipcomp: unknown flags 1D [ 285.733125][ T7915] tipc: Enabling of bearer rejected, already enabled [ 285.948162][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 285.973033][ T7929] device syzkaller0 entered promiscuous mode [ 285.979936][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 286.015894][ T7928] ip_tables: iptables: counters copy to user failed while replacing table [ 286.239075][ T7939] loop1: detected capacity change from 0 to 512 [ 286.268617][ T7939] ext4: Unknown parameter 'nouser_xattr' [ 286.316817][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 286.339933][ T7943] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1061'. [ 287.193614][ T7949] xt_ipcomp: unknown flags 1D [ 287.206208][ T7949] tipc: Enabling of bearer rejected, already enabled [ 287.504812][ T7961] tipc: Enabling of bearer rejected, already enabled [ 287.513463][ T7961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1070'. [ 288.479426][ T7974] device syzkaller0 entered promiscuous mode [ 288.591235][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 288.607954][ T7980] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1076'. [ 288.997065][ T7986] binder: BINDER_SET_CONTEXT_MGR already set [ 289.003236][ T7986] binder: 7975:7986 ioctl 4018620d 200000004a80 returned -16 [ 289.011560][ T7986] binder: 7975:7986 ioctl c0306201 0 returned -14 [ 289.206183][ T7988] netlink: 'syz.4.1077': attribute type 9 has an invalid length. [ 289.214055][ T7988] netlink: 'syz.4.1077': attribute type 6 has an invalid length. [ 291.719506][ T8030] binder: BINDER_SET_CONTEXT_MGR already set [ 291.725828][ T8030] binder: 8019:8030 ioctl 4018620d 200000004a80 returned -16 [ 292.910269][ T8044] device syzkaller0 entered promiscuous mode [ 293.059213][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 293.108387][ T8050] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1099'. [ 293.159314][ T8054] loop0: detected capacity change from 0 to 512 [ 293.203669][ T8054] ext4: Unknown parameter 'nouser_xattr' [ 293.882425][ T8069] 8021q: VLANs not supported on caif0 [ 294.103234][ T8073] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1104'. [ 294.396777][ T8079] rxe_eth0 speed is unknown, defaulting to 1000 [ 294.497126][ T8079] wg0 speed is unknown, defaulting to 1000 [ 294.510484][ T8083] rxe_eth0 speed is unknown, defaulting to 1000 [ 294.613899][ T8083] wg0 speed is unknown, defaulting to 1000 [ 294.653258][ T8082] rxe_eth0 speed is unknown, defaulting to 1000 [ 294.757937][ T8082] wg0 speed is unknown, defaulting to 1000 [ 295.642509][ T8105] 8021q: VLANs not supported on caif0 [ 295.725828][ T8112] binder: BINDER_SET_CONTEXT_MGR already set [ 295.732024][ T8112] binder: 8100:8112 ioctl 4018620d 200000004a80 returned -16 [ 295.835092][ T8111] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1118'. [ 296.802598][ T8122] rxe_eth0 speed is unknown, defaulting to 1000 [ 296.904686][ T8122] wg0 speed is unknown, defaulting to 1000 [ 296.970598][ T8127] rxe_eth0 speed is unknown, defaulting to 1000 [ 297.072129][ T8127] wg0 speed is unknown, defaulting to 1000 [ 297.078041][ T8122] rxe_eth0 speed is unknown, defaulting to 1000 [ 297.183613][ T8122] wg0 speed is unknown, defaulting to 1000 [ 297.329305][ T8129] netlink: 'syz.1.1124': attribute type 9 has an invalid length. [ 297.337198][ T8129] netlink: 'syz.1.1124': attribute type 6 has an invalid length. [ 298.180435][ T8146] loop4: detected capacity change from 0 to 128 [ 298.429345][ T8150] 8021q: VLANs not supported on caif0 [ 299.042688][ T8154] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1132'. [ 299.398809][ T8160] binder: BINDER_SET_CONTEXT_MGR already set [ 299.405044][ T8160] binder: 8153:8160 ioctl 4018620d 200000004a80 returned -16 [ 299.993222][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 300.275985][ T8174] loop0: detected capacity change from 0 to 512 [ 300.285680][ T8178] netlink: 'syz.2.1138': attribute type 12 has an invalid length. [ 300.329095][ T8174] ext4: Unknown parameter 'nouser_xattr' [ 300.372637][ T8180] device syzkaller0 entered promiscuous mode [ 300.394166][ T8177] tipc: Enabled bearer , priority 0 [ 300.583567][ T8173] tipc: Resetting bearer [ 301.235839][ T8173] tipc: Disabling bearer [ 301.457385][ T8189] 8021q: VLANs not supported on caif0 [ 301.529279][ T8193] loop1: detected capacity change from 0 to 128 [ 301.725735][ T8195] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1147'. [ 302.242296][ T8202] binder: BINDER_SET_CONTEXT_MGR already set [ 302.248477][ T8202] binder: 8196:8202 ioctl 4018620d 200000004a80 returned -16 [ 302.841946][ T8206] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 302.849925][ T8206] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1150'. [ 302.876789][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 302.928237][ T8215] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1152'. [ 302.952698][ T8216] netlink: 'syz.0.1153': attribute type 12 has an invalid length. [ 302.987915][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 303.148380][ T8221] device syzkaller0 entered promiscuous mode [ 303.165120][ T8221] tipc: Enabled bearer , priority 0 [ 303.199061][ T8220] tipc: Resetting bearer [ 303.228021][ T8220] tipc: Disabling bearer [ 303.371115][ T8228] 8021q: VLANs not supported on caif0 [ 303.440195][ T8230] loop2: detected capacity change from 0 to 128 [ 303.581293][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 303.829939][ T14] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 303.937075][ T14] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 304.109389][ T14] usb 4-1: Product: syz [ 304.202612][ T14] usb 4-1: Manufacturer: syz [ 304.312995][ T14] usb 4-1: SerialNumber: syz [ 304.383505][ T14] usb 4-1: config 0 descriptor?? [ 304.442756][ T14] ch341 4-1:0.0: ch341-uart converter detected [ 304.583715][ T8241] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1162'. [ 304.900552][ T8248] binder: BINDER_SET_CONTEXT_MGR already set [ 304.906748][ T8248] binder: 8237:8248 ioctl 4018620d 200000004a80 returned -16 [ 305.134088][ T8245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1166'. [ 305.430419][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 305.708942][ T8258] 8021q: VLANs not supported on caif0 [ 305.735761][ T8255] device syzkaller0 entered promiscuous mode [ 305.758987][ T8255] tipc: Enabled bearer , priority 0 [ 305.779093][ T8253] tipc: Resetting bearer [ 305.786143][ T14] usb 4-1: failed to send control message: -71 [ 305.801261][ T14] ch341-uart: probe of ttyUSB0 failed with error -71 [ 305.876330][ T14] usb 4-1: USB disconnect, device number 6 [ 305.932919][ T8253] tipc: Disabling bearer [ 305.940894][ T14] ch341 4-1:0.0: device disconnected [ 305.984860][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 306.002187][ T8264] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1172'. [ 306.090505][ T8267] loop1: detected capacity change from 0 to 128 [ 306.731742][ T8276] netlink: 'syz.4.1176': attribute type 9 has an invalid length. [ 306.739548][ T8276] netlink: 'syz.4.1176': attribute type 6 has an invalid length. [ 307.416319][ T8271] netlink: 'syz.2.1175': attribute type 10 has an invalid length. [ 307.441936][ T8271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1175'. [ 307.532155][ T8280] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1178'. [ 308.010317][ T8293] binder: BINDER_SET_CONTEXT_MGR already set [ 308.016480][ T8293] binder: 8283:8293 ioctl 4018620d 200000004a80 returned -16 [ 308.025321][ T8293] binder: 8283:8293 ioctl c0306201 0 returned -14 [ 308.746708][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 308.894598][ T8300] 8021q: VLANs not supported on caif0 [ 308.943772][ T8303] device syzkaller0 entered promiscuous mode [ 309.023652][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 309.064750][ T8308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1187'. [ 309.093276][ T8303] tipc: Enabled bearer , priority 0 [ 309.124398][ T8301] tipc: Resetting bearer [ 309.125259][ T8315] loop0: detected capacity change from 0 to 128 [ 309.419391][ T8301] tipc: Disabling bearer [ 309.864871][ T8317] netlink: 'syz.3.1191': attribute type 9 has an invalid length. [ 309.872810][ T8317] netlink: 'syz.3.1191': attribute type 6 has an invalid length. [ 310.147737][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1194'. [ 310.573250][ T8339] binder: BINDER_SET_CONTEXT_MGR already set [ 310.579357][ T8339] binder: 8329:8339 ioctl 4018620d 200000004a80 returned -16 [ 310.588165][ T8339] binder: 8329:8339 ioctl c0306201 0 returned -14 [ 311.083248][ T8343] 8021q: VLANs not supported on caif0 [ 311.129686][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 311.322524][ T8348] device syzkaller0 entered promiscuous mode [ 311.345805][ T8348] tipc: Enabled bearer , priority 0 [ 311.354902][ T8347] tipc: Resetting bearer [ 311.409075][ T8347] tipc: Disabling bearer [ 311.418484][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 311.436176][ T8350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1203'. [ 311.437623][ T8352] loop2: detected capacity change from 0 to 128 [ 311.720223][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'. [ 311.730273][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 311.740851][ T8358] ip_tables: iptables: counters copy to user failed while replacing table [ 312.273384][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'. [ 312.694166][ T8372] 8021q: VLANs not supported on nlmon0 [ 312.772894][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 312.877452][ T8378] binder: BINDER_SET_CONTEXT_MGR already set [ 312.883847][ T8378] binder: 8369:8378 ioctl 4018620d 200000004a80 returned -16 [ 312.892806][ T8378] binder: 8369:8378 ioctl c0306201 0 returned -14 [ 313.485308][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1217'. [ 313.746142][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 313.761799][ T8388] ip_tables: iptables: counters copy to user failed while replacing table [ 313.850373][ T8393] loop1: detected capacity change from 0 to 128 [ 314.285206][ T8404] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.395082][ T8404] wg0 speed is unknown, defaulting to 1000 [ 314.554335][ T8407] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.653012][ T8407] wg0 speed is unknown, defaulting to 1000 [ 314.658913][ T8404] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.772655][ T8404] wg0 speed is unknown, defaulting to 1000 [ 315.208584][ T8416] 8021q: VLANs not supported on nlmon0 [ 315.286620][ T8418] device syzkaller0 entered promiscuous mode [ 315.330638][ T8418] tipc: Enabled bearer , priority 0 [ 315.352540][ T8417] tipc: Resetting bearer [ 315.445738][ T8417] tipc: Disabling bearer [ 315.637729][ T8431] binder: BINDER_SET_CONTEXT_MGR already set [ 315.643916][ T8431] binder: 8421:8431 ioctl 4018620d 200000004a80 returned -16 [ 316.102952][ T8432] __nla_validate_parse: 1 callbacks suppressed [ 316.103303][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 316.382861][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'. [ 316.412187][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 316.413211][ T8441] loop4: detected capacity change from 0 to 128 [ 316.497138][ T8435] ip_tables: iptables: counters copy to user failed while replacing table [ 317.027795][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.037923][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.577150][ T8451] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.724297][ T8463] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.730634][ T8451] wg0 speed is unknown, defaulting to 1000 [ 317.838327][ T8463] wg0 speed is unknown, defaulting to 1000 [ 317.870842][ T8464] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.976793][ T8464] wg0 speed is unknown, defaulting to 1000 [ 318.171444][ T8462] device syzkaller0 entered promiscuous mode [ 318.242716][ T8468] 8021q: VLANs not supported on nlmon0 [ 318.552720][ T8477] device syzkaller0 entered promiscuous mode [ 318.744560][ T8477] tipc: Enabled bearer , priority 0 [ 318.760461][ T8475] tipc: Resetting bearer [ 318.788544][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1247'. [ 318.907704][ T8487] binder: BINDER_SET_CONTEXT_MGR already set [ 318.913922][ T8487] binder: 8479:8487 ioctl 4018620d 200000004a80 returned -16 [ 319.054366][ T8475] tipc: Disabling bearer [ 319.697487][ T8497] loop0: detected capacity change from 0 to 128 [ 319.971715][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1251'. [ 319.984128][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1251'. [ 320.745752][ T8511] 8021q: VLANs not supported on caif0 [ 320.926604][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1251'. [ 320.974958][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1251'. [ 321.017889][ T8520] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.119598][ T8520] wg0 speed is unknown, defaulting to 1000 [ 321.167440][ T8524] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.271995][ T8524] wg0 speed is unknown, defaulting to 1000 [ 321.277891][ T8523] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.386079][ T8523] wg0 speed is unknown, defaulting to 1000 [ 321.708750][ T8530] netlink: 'syz.4.1258': attribute type 12 has an invalid length. [ 321.750228][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 321.886547][ T8538] device syzkaller0 entered promiscuous mode [ 321.897629][ T8538] tipc: Enabled bearer , priority 0 [ 321.907010][ T8537] tipc: Resetting bearer [ 321.959369][ T8537] tipc: Disabling bearer [ 322.072912][ T8543] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1264'. [ 322.186795][ T8544] binder: BINDER_SET_CONTEXT_MGR already set [ 322.192970][ T8544] binder: 8535:8544 ioctl 4018620d 200000004a80 returned -16 [ 322.956775][ T8554] 8021q: VLANs not supported on caif0 [ 323.279802][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 323.312638][ T8568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1273'. [ 323.352126][ T8564] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1271'. [ 323.566394][ T8575] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1275'. [ 323.926068][ T8587] 8021q: VLANs not supported on caif0 [ 323.987885][ T8589] binder: BINDER_SET_CONTEXT_MGR already set [ 323.994025][ T8589] binder: 8577:8589 ioctl 4018620d 200000004a80 returned -16 [ 324.406152][ T8590] netlink: 'syz.3.1280': attribute type 12 has an invalid length. [ 325.014514][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 325.085416][ T8608] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1289'. [ 325.121759][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1290'. [ 325.240274][ T8616] device syzkaller0 entered promiscuous mode [ 325.570815][ T8624] 8021q: VLANs not supported on caif0 [ 325.834909][ T8634] netlink: 'syz.3.1298': attribute type 12 has an invalid length. [ 325.864324][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 325.874024][ T8631] xt_ipcomp: unknown flags 1D [ 325.919830][ T8631] tipc: Enabling of bearer rejected, already enabled [ 325.931281][ T8635] ip_tables: iptables: counters copy to user failed while replacing table [ 326.028251][ T8638] binder: BINDER_SET_CONTEXT_MGR already set [ 326.035362][ T8638] binder: 8627:8638 ioctl 4018620d 200000004a80 returned -16 [ 327.051760][ T8652] device syzkaller0 entered promiscuous mode [ 327.216684][ T8660] 8021q: VLANs not supported on caif0 [ 327.460191][ T8671] xt_ipcomp: unknown flags 1D [ 327.523654][ T8671] tipc: Enabling of bearer rejected, already enabled [ 327.750463][ T8678] netlink: 'syz.3.1314': attribute type 12 has an invalid length. [ 327.899270][ T8680] binder: BINDER_SET_CONTEXT_MGR already set [ 327.905628][ T8680] binder: 8672:8680 ioctl 4018620d 200000004a80 returned -16 [ 328.711827][ T8685] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.812758][ T8685] wg0 speed is unknown, defaulting to 1000 [ 328.825589][ T8694] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.940525][ T8691] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.968647][ T8694] wg0 speed is unknown, defaulting to 1000 [ 329.068648][ T8691] wg0 speed is unknown, defaulting to 1000 [ 329.524723][ T8707] xt_ipcomp: unknown flags 1D [ 329.597996][ T8707] tipc: Enabling of bearer rejected, already enabled [ 329.646896][ T8706] 8021q: VLANs not supported on caif0 [ 330.168293][ T8729] netlink: 'syz.4.1331': attribute type 12 has an invalid length. [ 330.226495][ T8730] binder: BINDER_SET_CONTEXT_MGR already set [ 330.232664][ T8730] binder: 8720:8730 ioctl 4018620d 200000004a80 returned -16 [ 330.788315][ T8732] Set syz1 is full, maxelem 2076 reached [ 331.062797][ T8737] __nla_validate_parse: 2 callbacks suppressed [ 331.062825][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1336'. [ 331.177447][ T8745] xt_ipcomp: unknown flags 1D [ 331.220643][ T8745] tipc: Enabling of bearer rejected, already enabled [ 331.394479][ T8747] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.519379][ T8753] 8021q: VLANs not supported on caif0 [ 331.531499][ T8747] wg0 speed is unknown, defaulting to 1000 [ 331.541651][ T8755] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.645166][ T8755] wg0 speed is unknown, defaulting to 1000 [ 331.688868][ T8751] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.790337][ T8751] wg0 speed is unknown, defaulting to 1000 [ 331.935200][ T8757] device syzkaller0 entered promiscuous mode [ 332.038179][ T8757] tipc: Enabled bearer , priority 0 [ 332.142751][ T8763] device syzkaller0 entered promiscuous mode [ 332.164465][ T8763] tipc: Enabled bearer , priority 0 [ 332.197476][ T8756] tipc: Resetting bearer [ 332.265457][ T8756] tipc: Disabling bearer [ 332.301975][ T8762] tipc: Resetting bearer [ 332.357883][ T8762] tipc: Disabling bearer [ 332.425569][ T8772] binder: BINDER_SET_CONTEXT_MGR already set [ 332.431734][ T8772] binder: 8765:8772 ioctl 4018620d 200000004a80 returned -16 [ 333.259082][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 333.363850][ T8778] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1348'. [ 333.413692][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 333.730385][ T8790] xt_ipcomp: unknown flags 1D [ 333.882104][ T8790] tipc: Enabling of bearer rejected, already enabled [ 334.280337][ T8796] device batadv0 entered promiscuous mode [ 334.297487][ T8796] device vlan4 entered promiscuous mode [ 334.497385][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1358'. [ 334.658301][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1358'. [ 334.828031][ T8817] binder: BINDER_SET_CONTEXT_MGR already set [ 334.834198][ T8817] binder: 8807:8817 ioctl 4018620d 200000004a80 returned -16 [ 335.090082][ T8814] tipc: Enabled bearer , priority 0 [ 335.376568][ T8812] tipc: Disabling bearer [ 335.670259][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1362'. [ 335.692195][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 335.722165][ T8822] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1363'. [ 335.848473][ T8829] xt_ipcomp: unknown flags 1D [ 335.879397][ T8829] tipc: Enabling of bearer rejected, already enabled [ 336.004897][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1369'. [ 336.062347][ T8837] netlink: 'syz.4.1368': attribute type 12 has an invalid length. [ 336.123054][ T8839] tipc: Enabling of bearer rejected, failed to enable media [ 336.764196][ T8858] binder: BINDER_SET_CONTEXT_MGR already set [ 336.770303][ T8858] binder: 8846:8858 ioctl 4018620d 200000004a80 returned -16 [ 337.353265][ T8857] tipc: Enabled bearer , priority 0 [ 337.407192][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1377'. [ 337.489410][ T8856] tipc: Disabling bearer [ 337.597832][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 337.717944][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 337.786865][ T8873] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1378'. [ 337.837979][ T8875] tipc: Enabling of bearer rejected, failed to enable media [ 337.881102][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 337.920989][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 337.945168][ T8877] ip_tables: iptables: counters copy to user failed while replacing table [ 337.990291][ T8881] 8021q: VLANs not supported on caif0 [ 338.198533][ T8887] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1387'. [ 338.248986][ T8890] Set syz1 is full, maxelem 2076 reached [ 338.556382][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 338.609886][ T8898] tipc: Enabled bearer , priority 0 [ 338.646878][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 338.659155][ T8897] tipc: Disabling bearer [ 338.833905][ T8904] device syzkaller0 entered promiscuous mode [ 338.857462][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 338.938575][ T8910] ip_tables: iptables: counters copy to user failed while replacing table [ 338.955857][ T8908] 8021q: VLANs not supported on caif0 [ 339.742148][ T8938] tipc: Enabled bearer , priority 0 [ 339.768316][ T8941] ip_tables: iptables: counters copy to user failed while replacing table [ 339.884767][ T8936] tipc: Disabling bearer [ 339.914122][ T8943] 8021q: VLANs not supported on caif0 [ 340.159888][ T8946] device syzkaller0 entered promiscuous mode [ 340.202656][ T8954] netlink: 'syz.3.1416': attribute type 12 has an invalid length. [ 340.875463][ T8976] xt_ipcomp: unknown flags 1D [ 340.932150][ T8976] tipc: Enabling of bearer rejected, already enabled [ 341.039381][ T8981] tipc: Enabled bearer , priority 0 [ 341.112410][ T8980] tipc: Disabling bearer [ 341.177712][ T8983] 8021q: VLANs not supported on caif0 [ 341.426641][ T8995] device syzkaller0 entered promiscuous mode [ 341.959095][ T9020] xt_ipcomp: unknown flags 1D [ 342.003411][ T9020] tipc: Enabling of bearer rejected, already enabled [ 342.079841][ T9026] tipc: Enabled bearer , priority 0 [ 342.168310][ T9023] tipc: Disabling bearer [ 342.286366][ T9033] 8021q: VLANs not supported on caif0 [ 342.554771][ T9042] device syzkaller0 entered promiscuous mode [ 342.836105][ T9054] xt_ipcomp: unknown flags 1D [ 342.893336][ T9054] tipc: Enabling of bearer rejected, already enabled [ 342.957968][ T9060] 8021q: VLANs not supported on caif0 [ 343.113950][ T9064] tipc: Enabled bearer , priority 0 [ 343.168560][ T9062] tipc: Disabling bearer [ 343.207018][ T9074] __nla_validate_parse: 7 callbacks suppressed [ 343.207036][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1457'. [ 343.266596][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1457'. [ 343.451094][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1457'. [ 343.491308][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1457'. [ 343.596644][ T9086] device syzkaller0 entered promiscuous mode [ 343.879007][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 343.922683][ T9091] ip_tables: iptables: counters copy to user failed while replacing table [ 344.038257][ T9095] xt_ipcomp: unknown flags 1D [ 344.076408][ T9095] tipc: Enabling of bearer rejected, already enabled [ 344.203910][ T9103] 8021q: VLANs not supported on caif0 [ 344.249866][ T9105] netlink: 'syz.1.1470': attribute type 10 has an invalid length. [ 344.266567][ T9105] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1470'. [ 344.444873][ T9114] device syzkaller0 entered promiscuous mode [ 344.655718][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 344.743183][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 345.096396][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 345.182367][ T9145] ip_tables: iptables: counters copy to user failed while replacing table [ 345.790255][ T9174] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 345.801993][ T9174] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1492'. [ 346.001327][ T4398] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 346.197411][ T4398] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 346.221290][ T4398] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 346.229544][ T4398] usb 1-1: Product: syz [ 346.251099][ T4398] usb 1-1: Manufacturer: syz [ 346.271247][ T4398] usb 1-1: SerialNumber: syz [ 346.287956][ T4398] usb 1-1: config 0 descriptor?? [ 346.308068][ T4398] ch341 1-1:0.0: ch341-uart converter detected [ 346.945224][ T9214] netlink: 'syz.4.1506': attribute type 9 has an invalid length. [ 346.967987][ T9214] netlink: 'syz.4.1506': attribute type 9 has an invalid length. [ 347.122790][ T4398] usb 1-1: failed to send control message: -71 [ 347.129061][ T4398] ch341-uart: probe of ttyUSB0 failed with error -71 [ 347.173645][ T4398] usb 1-1: USB disconnect, device number 4 [ 347.197587][ T4398] ch341 1-1:0.0: device disconnected [ 347.540549][ T9233] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 348.521547][ T4260] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 348.746528][ T4260] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 348.760271][ T4260] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 348.777919][ T4260] usb 3-1: Product: syz [ 348.792441][ T4260] usb 3-1: Manufacturer: syz [ 348.808561][ T4260] usb 3-1: SerialNumber: syz [ 348.834092][ T4260] usb 3-1: config 0 descriptor?? [ 348.848748][ T4260] ch341 3-1:0.0: ch341-uart converter detected [ 349.318991][ T9303] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 349.347866][ T9303] __nla_validate_parse: 4 callbacks suppressed [ 349.347885][ T9303] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1545'. [ 349.657535][ T4260] usb 3-1: failed to send control message: -71 [ 349.673104][ T4260] ch341-uart: probe of ttyUSB0 failed with error -71 [ 349.732394][ T4260] usb 3-1: USB disconnect, device number 4 [ 349.752311][ T4260] ch341 3-1:0.0: device disconnected [ 350.074261][ T9333] device syzkaller0 entered promiscuous mode [ 350.097111][ T9335] bond0: (slave gretap0): Error -99 calling set_mac_address [ 350.113874][ T9333] tipc: Enabled bearer , priority 0 [ 350.131081][ T9332] tipc: Resetting bearer [ 350.197827][ T9332] tipc: Disabling bearer [ 350.269797][ T9341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1559'. [ 350.292385][ T9341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1559'. [ 350.371100][ T9345] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 350.398970][ T9345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1562'. [ 351.074250][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.081688][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.761992][ T9353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.838945][ T9353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.304616][ T9353] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.327422][ T9353] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.337409][ T9353] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.767024][ T9391] 8021q: VLANs not supported on caif0 [ 353.390359][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1580'. [ 353.431481][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1580'. [ 353.692409][ T9430] netlink: 'syz.0.1584': attribute type 10 has an invalid length. [ 353.706824][ T9430] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1584'. [ 353.983373][ T9430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.020375][ T9430] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.048604][ T9430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.205894][ T9440] 8021q: VLANs not supported on caif0 [ 355.195082][ T9471] rxe_eth0 speed is unknown, defaulting to 1000 [ 355.273035][ T9476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1597'. [ 355.315104][ T9476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1597'. [ 355.331558][ T9471] wg0 speed is unknown, defaulting to 1000 [ 355.342026][ T9477] rxe_eth0 speed is unknown, defaulting to 1000 [ 355.444391][ T9477] wg0 speed is unknown, defaulting to 1000 [ 355.491286][ T9474] rxe_eth0 speed is unknown, defaulting to 1000 [ 355.602213][ T9474] wg0 speed is unknown, defaulting to 1000 [ 356.091352][ T9488] 8021q: VLANs not supported on caif0 [ 356.647070][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 357.468467][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1612'. [ 357.504926][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1612'. [ 357.668588][ T9540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'. [ 357.705099][ T9540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'. [ 357.758110][ T9545] 8021q: VLANs not supported on caif0 [ 358.088229][ T9553] netlink: 'syz.3.1616': attribute type 10 has an invalid length. [ 358.118718][ T9553] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1616'. [ 358.375150][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 359.330471][ T9588] 8021q: VLANs not supported on caif0 [ 359.574090][ T9602] tipc: Enabling of bearer rejected, failed to enable media [ 360.095739][ T9615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1631'. [ 360.315487][ T9623] netlink: 'syz.4.1635': attribute type 10 has an invalid length. [ 360.324216][ T9623] __nla_validate_parse: 3 callbacks suppressed [ 360.324251][ T9623] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1635'. [ 360.953796][ T9640] 8021q: VLANs not supported on caif0 [ 361.597265][ T9666] device syzkaller0 entered promiscuous mode [ 361.698501][ T9670] netlink: 'syz.3.1648': attribute type 10 has an invalid length. [ 361.710459][ T9670] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1648'. [ 361.969090][ T9677] Set syz1 is full, maxelem 2076 reached [ 362.192879][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1653'. [ 362.210554][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1653'. [ 362.386124][ T9687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1653'. [ 362.447740][ T9687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1653'. [ 362.480610][ T9700] netlink: 'syz.1.1657': attribute type 12 has an invalid length. [ 362.699121][ T9705] device syzkaller0 entered promiscuous mode [ 362.917881][ T9713] Set syz1 is full, maxelem 2076 reached [ 363.365504][ T9736] netlink: 'syz.4.1671': attribute type 10 has an invalid length. [ 363.396852][ T9736] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1671'. [ 363.411343][ T126] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 363.605608][ T126] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 363.622723][ T126] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 363.661580][ T126] usb 4-1: Product: syz [ 363.679730][ T126] usb 4-1: Manufacturer: syz [ 363.700189][ T126] usb 4-1: SerialNumber: syz [ 363.730145][ T126] usb 4-1: config 0 descriptor?? [ 363.768885][ T126] ch341 4-1:0.0: ch341-uart converter detected [ 363.820081][ T9754] device syzkaller0 entered promiscuous mode [ 363.929791][ T9757] Set syz1 is full, maxelem 2076 reached [ 364.177775][ T9764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1678'. [ 364.206545][ T9764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1678'. [ 364.308157][ T9772] netlink: 'syz.0.1682': attribute type 12 has an invalid length. [ 364.335668][ T9764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1678'. [ 364.596376][ T126] usb 4-1: failed to send control message: -71 [ 364.618036][ T126] ch341-uart: probe of ttyUSB0 failed with error -71 [ 364.644288][ T126] usb 4-1: USB disconnect, device number 7 [ 364.662991][ T126] ch341 4-1:0.0: device disconnected [ 364.943351][ T9792] device syzkaller0 entered promiscuous mode [ 366.076638][ T9834] device syzkaller0 entered promiscuous mode [ 366.276928][ T954] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 366.465614][ T954] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 366.486408][ T954] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 366.526175][ T954] usb 2-1: Product: syz [ 366.552993][ T954] usb 2-1: Manufacturer: syz [ 366.578902][ T9864] tipc: Enabling of bearer rejected, failed to enable media [ 366.580717][ T954] usb 2-1: SerialNumber: syz [ 366.683393][ T954] usb 2-1: config 0 descriptor?? [ 366.727332][ T954] ch341 2-1:0.0: ch341-uart converter detected [ 366.943690][ T954] usb 2-1: failed to receive control message: -32 [ 366.951308][ T954] ch341-uart: probe of ttyUSB0 failed with error -32 [ 367.585218][ T9890] device syzkaller0 entered promiscuous mode [ 368.699916][ T9938] device syzkaller0 entered promiscuous mode [ 368.822089][ T9940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1733'. [ 369.052382][ T126] usb 2-1: USB disconnect, device number 2 [ 369.059138][ T126] ch341 2-1:0.0: device disconnected [ 369.347578][ T9958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.815051][ T9975] device syzkaller0 entered promiscuous mode [ 370.101390][ T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 370.206448][ T9990] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.308609][ T9990] wg0 speed is unknown, defaulting to 1000 [ 370.322009][ T9994] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.425085][ T9994] wg0 speed is unknown, defaulting to 1000 [ 370.467219][ T9993] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.570905][ T9993] wg0 speed is unknown, defaulting to 1000 [ 370.613255][ T126] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 370.638717][ T126] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 370.677008][ T126] usb 2-1: Product: syz [ 370.706069][ T126] usb 2-1: Manufacturer: syz [ 370.739155][ T126] usb 2-1: SerialNumber: syz [ 370.755410][ T9999] netlink: 'syz.0.1758': attribute type 12 has an invalid length. [ 370.913122][ T126] usb 2-1: config 0 descriptor?? [ 370.932367][ T126] ch341 2-1:0.0: ch341-uart converter detected [ 371.134699][ T126] usb 2-1: failed to receive control message: -32 [ 371.161499][ T126] ch341-uart: probe of ttyUSB0 failed with error -32 [ 371.338353][T10016] device syzkaller0 entered promiscuous mode [ 371.724584][T10037] xt_ipcomp: unknown flags 1D [ 371.800502][T10037] tipc: Enabling of bearer rejected, already enabled [ 371.810334][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1770'. [ 371.842404][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1770'. [ 371.927732][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 371.945843][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 371.970622][T10042] ip_tables: iptables: counters copy to user failed while replacing table [ 372.687657][T10063] device syzkaller0 entered promiscuous mode [ 372.934254][ T4349] usb 2-1: USB disconnect, device number 3 [ 372.953717][ T4349] ch341 2-1:0.0: device disconnected [ 372.973005][T10073] xt_ipcomp: unknown flags 1D [ 373.012377][T10071] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 373.031397][T10071] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1783'. [ 373.058896][T10073] tipc: Enabling of bearer rejected, already enabled [ 373.087436][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 373.107146][T10079] device syzkaller0 entered promiscuous mode [ 373.119089][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 373.150332][T10075] ip_tables: iptables: counters copy to user failed while replacing table [ 373.517503][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1790'. [ 373.527323][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1790'. [ 375.182024][T10084] 8021q: VLANs not supported on caif0 [ 375.448511][T10113] device syzkaller0 entered promiscuous mode [ 375.635177][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 375.653931][T10124] xt_ipcomp: unknown flags 1D [ 375.863585][T10133] loop4: detected capacity change from 0 to 512 [ 375.906961][T10133] EXT4-fs (loop4): 1 truncate cleaned up [ 375.912937][T10133] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 376.467740][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 376.552404][T10129] tipc: Enabling of bearer rejected, already enabled [ 376.560433][T10134] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1797'. [ 376.589081][T10140] 8021q: VLANs not supported on caif0 [ 376.709981][T10142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1802'. [ 376.752438][T10142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1802'. [ 376.857877][T10149] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 376.881298][T10149] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1805'. [ 377.018966][T10148] device syzkaller0 entered promiscuous mode [ 378.473405][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.479793][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.322575][T10187] loop2: detected capacity change from 0 to 512 [ 379.336723][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 379.357343][T10187] EXT4-fs (loop2): 1 truncate cleaned up [ 379.363312][T10187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 379.486286][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 379.566373][T10185] ip_tables: iptables: counters copy to user failed while replacing table [ 379.823039][T10136] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 379.967641][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 380.060670][T10198] 8021q: VLANs not supported on caif0 [ 380.128816][T10206] xt_ipcomp: unknown flags 1D [ 380.136604][T10202] tipc: Enabled bearer , priority 0 [ 380.200341][T10200] tipc: Disabling bearer [ 380.236978][T10206] tipc: Enabling of bearer rejected, already enabled [ 380.488805][T10208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1818'. [ 380.518635][T10208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1818'. [ 380.585101][T10213] device syzkaller0 entered promiscuous mode [ 382.937868][T10226] device syzkaller0 entered promiscuous mode [ 382.947353][T10257] tipc: Enabling of bearer rejected, failed to enable media [ 383.307364][T10272] xt_ipcomp: unknown flags 1D [ 383.334827][T10269] 8021q: VLANs not supported on caif0 [ 383.340474][T10274] netlink: 'syz.3.1832': attribute type 10 has an invalid length. [ 383.348612][T10274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1832'. [ 383.400210][T10272] tipc: Enabling of bearer rejected, already enabled [ 383.427443][T10270] device syzkaller0 entered promiscuous mode [ 383.447222][T10270] tipc: Enabled bearer , priority 0 [ 383.688036][T10268] tipc: Resetting bearer [ 383.701973][T10283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1834'. [ 383.711029][T10283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1834'. [ 383.773598][T10268] tipc: Disabling bearer [ 384.223451][T10306] device syzkaller0 entered promiscuous mode [ 384.288593][T10311] tipc: Enabling of bearer rejected, failed to enable media [ 384.728604][T10322] xt_ipcomp: unknown flags 1D [ 384.777684][T10322] tipc: Enabling of bearer rejected, already enabled [ 385.148393][T10335] device syzkaller0 entered promiscuous mode [ 385.190224][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1849'. [ 385.248185][T10335] tipc: Enabled bearer , priority 0 [ 385.494771][T10334] tipc: Resetting bearer [ 385.508585][T10350] loop4: detected capacity change from 0 to 512 [ 385.560292][T10350] EXT4-fs (loop4): 1 truncate cleaned up [ 385.566256][T10350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 385.658400][T10334] tipc: Disabling bearer [ 385.706433][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1849'. [ 385.869119][T10359] device syzkaller0 entered promiscuous mode [ 386.133556][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 386.476242][T10369] xt_ipcomp: unknown flags 1D [ 386.502039][T10369] tipc: Enabling of bearer rejected, already enabled [ 386.601476][ T4349] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 386.818288][ T4349] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 386.833205][ T4349] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 386.842160][ T4349] usb 4-1: Product: syz [ 386.846391][ T4349] usb 4-1: Manufacturer: syz [ 386.851889][ T4349] usb 4-1: SerialNumber: syz [ 386.872524][ T4349] usb 4-1: config 0 descriptor?? [ 386.903223][ T4349] ch341 4-1:0.0: ch341-uart converter detected [ 387.192023][ T4349] usb 4-1: failed to receive control message: -32 [ 387.204882][ T4349] ch341-uart: probe of ttyUSB0 failed with error -32 [ 387.578738][T10393] device syzkaller0 entered promiscuous mode [ 387.852242][T10411] loop0: detected capacity change from 0 to 512 [ 387.880585][T10411] EXT4-fs (loop0): 1 truncate cleaned up [ 387.887325][T10411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 388.372810][T10419] device syzkaller0 entered promiscuous mode [ 388.416288][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 388.453163][T10419] tipc: Enabled bearer , priority 0 [ 388.560661][T10427] xt_ipcomp: unknown flags 1D [ 388.615688][T10427] tipc: Enabling of bearer rejected, already enabled [ 388.756024][T10417] tipc: Resetting bearer [ 388.845827][T10417] tipc: Disabling bearer [ 388.883295][T10434] Set syz1 is full, maxelem 2076 reached [ 389.145587][T10442] device syzkaller0 entered promiscuous mode [ 389.158905][T10442] tipc: Enabled bearer , priority 0 [ 389.181684][T10441] tipc: Resetting bearer [ 389.238098][T10441] tipc: Disabling bearer [ 389.382790][ T4349] usb 4-1: USB disconnect, device number 8 [ 389.406842][ T4349] ch341 4-1:0.0: device disconnected [ 389.537846][T10451] loop3: detected capacity change from 0 to 512 [ 389.583112][T10451] EXT4-fs (loop3): 1 truncate cleaned up [ 389.588857][T10451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 390.117904][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 390.129009][T10459] xt_ipcomp: unknown flags 1D [ 390.209078][T10459] tipc: Enabling of bearer rejected, already enabled [ 390.322638][T10464] device syzkaller0 entered promiscuous mode [ 390.363724][T10464] tipc: Enabled bearer , priority 0 [ 390.408129][T10462] tipc: Resetting bearer [ 390.531622][T10462] tipc: Disabling bearer [ 390.558322][T10470] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.659593][T10470] wg0 speed is unknown, defaulting to 1000 [ 390.673983][T10477] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.776395][T10477] wg0 speed is unknown, defaulting to 1000 [ 390.818328][T10475] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.920282][T10475] wg0 speed is unknown, defaulting to 1000 [ 390.956599][T10478] device syzkaller0 entered promiscuous mode [ 390.998671][T10474] tipc: Enabled bearer , priority 0 [ 391.078038][T10471] tipc: Resetting bearer [ 391.197157][T10471] tipc: Disabling bearer [ 391.385188][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 391.477158][T10490] loop1: detected capacity change from 0 to 512 [ 391.508866][T10490] EXT4-fs (loop1): 1 truncate cleaned up [ 391.514645][T10490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 391.649184][ T126] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 391.702608][ T126] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 391.780695][ T126] usb 3-1: Product: syz [ 391.810987][ T126] usb 3-1: Manufacturer: syz [ 391.833359][ T126] usb 3-1: SerialNumber: syz [ 391.881073][ T126] usb 3-1: config 0 descriptor?? [ 391.967087][ T126] ch341 3-1:0.0: ch341-uart converter detected [ 392.009831][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 392.108591][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 392.207536][ T126] usb 3-1: failed to receive control message: -121 [ 392.217920][ T126] ch341-uart: probe of ttyUSB0 failed with error -121 [ 392.396438][T10514] xt_ipcomp: unknown flags 1D [ 393.034603][T10498] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.041983][T10498] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.768635][T10498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.820653][T10498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.534048][T10498] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.543352][T10498] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.553097][T10498] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.562552][T10498] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.771886][T10540] device syzkaller0 entered promiscuous mode [ 394.846329][ T14] usb 3-1: USB disconnect, device number 5 [ 394.870141][ T14] ch341 3-1:0.0: device disconnected [ 394.978034][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 395.023674][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 395.050141][T10549] device syzkaller0 entered promiscuous mode [ 395.057133][T10546] ip_tables: iptables: counters copy to user failed while replacing table [ 395.130509][T10549] tipc: Enabled bearer , priority 0 [ 395.146090][T10547] tipc: Resetting bearer [ 395.248121][T10547] tipc: Disabling bearer [ 395.452934][T10564] loop3: detected capacity change from 0 to 512 [ 395.555197][T10564] EXT4-fs (loop3): 1 truncate cleaned up [ 395.560982][T10564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 396.030438][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 396.109240][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 396.614232][T10592] xt_ipcomp: unknown flags 1D [ 396.663742][T10592] tipc: Enabling of bearer rejected, already enabled [ 396.940062][T10598] rxe_eth0 speed is unknown, defaulting to 1000 [ 397.044218][T10598] wg0 speed is unknown, defaulting to 1000 [ 397.050102][T10602] rxe_eth0 speed is unknown, defaulting to 1000 [ 397.153278][T10602] wg0 speed is unknown, defaulting to 1000 [ 397.207897][T10601] rxe_eth0 speed is unknown, defaulting to 1000 [ 397.315419][T10601] wg0 speed is unknown, defaulting to 1000 [ 397.606378][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1919'. [ 397.677252][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 397.700684][T10608] ip_tables: iptables: counters copy to user failed while replacing table [ 397.842507][T10621] loop0: detected capacity change from 0 to 512 [ 397.912621][T10621] EXT4-fs (loop0): 1 truncate cleaned up [ 397.918390][T10621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 398.052603][T10611] device syzkaller0 entered promiscuous mode [ 398.094095][T10611] tipc: Enabled bearer , priority 0 [ 398.443146][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 398.508362][T10610] tipc: Resetting bearer [ 398.595488][T10610] tipc: Disabling bearer [ 398.688161][T10634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1926'. [ 398.868356][T10639] 8021q: VLANs not supported on caif0 [ 399.141843][T10647] xt_ipcomp: unknown flags 1D [ 399.188601][T10647] tipc: Enabling of bearer rejected, already enabled [ 399.429603][T10634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1926'. [ 399.887363][T10669] loop0: detected capacity change from 0 to 512 [ 399.919172][T10669] EXT4-fs (loop0): 1 truncate cleaned up [ 399.925166][T10669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 400.444090][T10674] device syzkaller0 entered promiscuous mode [ 400.454390][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 400.522942][T10674] tipc: Enabled bearer , priority 0 [ 400.587061][T10673] tipc: Resetting bearer [ 400.672844][T10673] tipc: Disabling bearer [ 400.718309][T10681] 8021q: VLANs not supported on caif0 [ 400.728288][T10685] device syzkaller0 entered promiscuous mode [ 400.746525][T10677] tipc: Enabled bearer , priority 0 [ 400.780996][T10676] tipc: Resetting bearer [ 400.876478][T10676] tipc: Disabling bearer [ 401.005087][T10692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1943'. [ 401.046886][T10692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1943'. [ 401.302199][T10705] loop0: detected capacity change from 0 to 512 [ 401.398129][T10705] EXT4-fs (loop0): 1 truncate cleaned up [ 401.404885][T10705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.813857][T10719] tipc: Enabling of bearer rejected, failed to enable media [ 401.948006][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 402.251745][T10725] 8021q: VLANs not supported on caif0 [ 402.760887][T10745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1959'. [ 402.780599][T10745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1959'. [ 403.017844][T10751] loop2: detected capacity change from 0 to 512 [ 403.103869][T10755] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.213136][T10755] wg0 speed is unknown, defaulting to 1000 [ 403.219019][T10762] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.368785][T10762] wg0 speed is unknown, defaulting to 1000 [ 403.387472][T10763] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.521444][T10763] wg0 speed is unknown, defaulting to 1000 [ 403.565369][T10751] EXT4-fs (loop2): 1 truncate cleaned up [ 403.572116][T10751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 403.929191][T10767] 8021q: VLANs not supported on caif0 [ 404.195218][T10774] tipc: Enabling of bearer rejected, failed to enable media [ 404.792891][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1974'. [ 404.828674][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1974'. [ 405.249101][T10806] 8021q: VLANs not supported on caif0 [ 405.341997][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 405.635163][T10823] Set syz1 is full, maxelem 2076 reached [ 405.648898][T10824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1988'. [ 405.692451][T10824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1988'. [ 405.789396][T10830] tipc: Enabling of bearer rejected, failed to enable media [ 406.272027][T10846] loop0: detected capacity change from 0 to 512 [ 406.312368][T10846] EXT4-fs (loop0): 1 truncate cleaned up [ 406.318165][T10846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 406.871871][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 406.943146][T10852] 8021q: VLANs not supported on caif0 [ 407.190171][T10858] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 407.418316][T10869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'. [ 407.627030][T10873] device syzkaller0 entered promiscuous mode [ 407.661047][T10873] tipc: Enabled bearer , priority 0 [ 407.668501][T10877] loop0: detected capacity change from 0 to 512 [ 407.699409][T10877] EXT4-fs (loop0): 1 truncate cleaned up [ 407.705511][T10877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 407.896151][T10872] tipc: Resetting bearer [ 408.027190][T10872] tipc: Disabling bearer [ 408.296783][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 408.487404][T10893] 8021q: VLANs not supported on caif0 [ 408.503730][T10892] device syzkaller0 entered promiscuous mode [ 408.912757][T10907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2016'. [ 409.122552][T10914] loop4: detected capacity change from 0 to 512 [ 409.165058][T10914] EXT4-fs (loop4): 1 truncate cleaned up [ 409.170793][T10914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 409.297731][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2021'. [ 409.389667][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'. [ 409.424859][T10918] ip_tables: iptables: counters copy to user failed while replacing table [ 409.828836][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 410.173209][T10923] bridge0: port 3(syz_tun) entered disabled state [ 410.426161][T10923] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.434619][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.574567][T10957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2031'. [ 410.650420][T10960] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2032'. [ 410.797510][T10923] infiniband syz1: set down [ 411.176747][T10923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.246774][T10923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.724383][T10923] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.733855][T10923] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.745104][T10923] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.754241][T10923] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.889054][T10943] rxe_eth0 speed is unknown, defaulting to 1000 [ 411.981246][T10952] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.069182][ T4361] wg0 speed is unknown, defaulting to 1000 [ 412.076894][T10943] wg0 speed is unknown, defaulting to 1000 [ 412.088214][ T4361] wg0 speed is unknown, defaulting to 1000 [ 412.151839][T10951] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.216285][T10952] wg0 speed is unknown, defaulting to 1000 [ 412.308640][T10951] wg0 speed is unknown, defaulting to 1000 [ 412.518256][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2035'. [ 412.590449][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 412.600866][T10976] loop4: detected capacity change from 0 to 512 [ 412.624533][T10976] EXT4-fs (loop4): 1 truncate cleaned up [ 412.630295][T10976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 412.713310][T10973] ip_tables: iptables: counters copy to user failed while replacing table [ 412.890260][T10983] Set syz1 is full, maxelem 2076 reached [ 413.229717][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 413.315881][T10990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2043'. [ 413.424183][T10995] device syzkaller0 entered promiscuous mode [ 413.471684][T10995] tipc: Enabled bearer , priority 0 [ 413.490234][T10993] tipc: Resetting bearer [ 413.557258][T10993] tipc: Disabling bearer [ 414.319350][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 414.365521][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'. [ 414.408137][T11031] ip_tables: iptables: counters copy to user failed while replacing table [ 414.482306][T11003] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.489671][T11003] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.527970][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2054'. [ 415.158833][T11003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.216891][T11003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.629519][T11003] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.638859][T11003] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.647823][T11003] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.656798][T11003] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.899814][T11005] lo speed is unknown, defaulting to 1000 [ 415.940339][T11013] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.024750][T11023] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.031159][T11013] wg0 speed is unknown, defaulting to 1000 [ 416.133467][T11023] wg0 speed is unknown, defaulting to 1000 [ 416.186310][T11020] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.287638][T11020] wg0 speed is unknown, defaulting to 1000 [ 416.551263][T11005] lo speed is unknown, defaulting to 1000 [ 416.557573][T11005] lo speed is unknown, defaulting to 1000 [ 416.598701][T11047] device syzkaller0 entered promiscuous mode [ 416.744888][T11054] xt_ipcomp: unknown flags 1D [ 416.835144][T11057] tipc: Enabling of bearer rejected, already enabled [ 417.032978][T11005] infiniband syz2: set down [ 417.037576][T11005] infiniband syz2: added lo [ 417.041443][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2064'. [ 417.042509][ T4361] lo speed is unknown, defaulting to 1000 [ 417.071025][T11005] rdma_rxe: unable to create cq [ 417.074010][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 417.082183][T11005] infiniband syz2: Couldn't create ib_mad CQ [ 417.111396][T11005] infiniband syz2: Couldn't open port 1 [ 417.118054][T11063] ip_tables: iptables: counters copy to user failed while replacing table [ 417.185052][T11005] RDS/IB: syz2: added [ 417.205955][T11005] smc: adding ib device syz2 with port count 1 [ 417.247698][T11005] smc: ib device syz2 port 1 has pnetid [ 417.268308][T11078] tipc: Enabling of bearer rejected, failed to enable media [ 417.306177][ T4260] lo speed is unknown, defaulting to 1000 [ 417.313219][T11005] lo speed is unknown, defaulting to 1000 [ 417.795597][T11005] lo speed is unknown, defaulting to 1000 [ 417.807080][T11087] loop3: detected capacity change from 0 to 512 [ 417.843543][T11087] FAT-fs (loop3): Unrecognized mount option ";{8G˽+2FstݛW" or missing value [ 418.176662][T11094] loop3: detected capacity change from 0 to 64 [ 418.382528][T11095] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.468629][T11095] wg0 speed is unknown, defaulting to 1000 [ 418.479246][T11097] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.574279][T11005] lo speed is unknown, defaulting to 1000 [ 418.592879][T11097] wg0 speed is unknown, defaulting to 1000 [ 418.598753][T11098] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.705404][T11098] wg0 speed is unknown, defaulting to 1000 [ 419.095913][T11104] device syzkaller0 entered promiscuous mode [ 419.118859][T11095] lo speed is unknown, defaulting to 1000 [ 419.220350][T11106] device syzkaller0 entered promiscuous mode [ 419.248396][T11110] netlink: 'syz.3.2075': attribute type 10 has an invalid length. [ 419.258963][T11110] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2075'. [ 420.936375][T11097] lo speed is unknown, defaulting to 1000 [ 421.046353][T11098] lo speed is unknown, defaulting to 1000 [ 421.125800][T11114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.134971][T11114] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.163739][T11114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.204156][T11005] lo speed is unknown, defaulting to 1000 [ 421.418026][T11117] Set syz1 is full, maxelem 2076 reached [ 421.474697][T11121] binder: 11120:11121 ioctl c0306201 2000000006c0 returned -14 [ 421.522012][T11123] xt_ipcomp: unknown flags 1D [ 421.541750][T11121] binder: 11120:11121 ioctl c0306201 2000000007c0 returned -14 [ 421.696591][T11127] tipc: Enabling of bearer rejected, already enabled [ 421.782516][T11005] lo speed is unknown, defaulting to 1000 [ 422.757332][T11005] lo speed is unknown, defaulting to 1000 [ 422.848133][T11141] device syzkaller0 entered promiscuous mode [ 422.871024][T11145] device syzkaller0 entered promiscuous mode [ 424.892117][T11005] lo speed is unknown, defaulting to 1000 [ 424.897982][T11150] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 424.912165][T11150] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2089'. [ 425.026888][T11162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.036354][T11162] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.054682][T11162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.109711][T11169] loop0: detected capacity change from 0 to 512 [ 425.137211][T11169] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 425.151526][T11005] lo speed is unknown, defaulting to 1000 [ 425.450834][T11005] lo speed is unknown, defaulting to 1000 [ 425.499213][T11169] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 426.609971][T11200] loop0: detected capacity change from 0 to 512 [ 426.708521][T11200] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.2102: missing EA_INODE flag [ 426.743755][T11200] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2102: error while reading EA inode 2 err=-117 [ 426.767372][T11200] EXT4-fs (loop0): 1 orphan inode deleted [ 426.802384][T11200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 426.865207][T11206] device syzkaller0 entered promiscuous mode [ 427.796956][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 428.048250][T11224] device syzkaller0 entered promiscuous mode [ 428.198571][T11230] device syzkaller0 entered promiscuous mode [ 428.504540][T11243] loop4: detected capacity change from 0 to 256 [ 428.560564][T11243] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 428.744823][T11246] tipc: Enabled bearer , priority 0 [ 428.836625][T11244] tipc: Disabling bearer [ 429.145575][T11254] device syzkaller0 entered promiscuous mode [ 429.462498][T11272] device syzkaller0 entered promiscuous mode [ 429.619761][T11280] binder: 11278:11280 ioctl c0306201 2000000006c0 returned -14 [ 429.659763][T11281] device syzkaller0 entered promiscuous mode [ 429.741299][T11283] loop1: detected capacity change from 0 to 1024 [ 431.174021][T11297] rxe_eth0 speed is unknown, defaulting to 1000 [ 431.259530][T11299] rxe_eth0 speed is unknown, defaulting to 1000 [ 431.266104][T11297] wg0 speed is unknown, defaulting to 1000 [ 431.366129][T11297] lo speed is unknown, defaulting to 1000 [ 431.371980][T11299] wg0 speed is unknown, defaulting to 1000 [ 431.441770][T11301] rxe_eth0 speed is unknown, defaulting to 1000 [ 431.536736][T11299] lo speed is unknown, defaulting to 1000 [ 431.547153][T11301] wg0 speed is unknown, defaulting to 1000 [ 431.649481][T11301] lo speed is unknown, defaulting to 1000 [ 432.112124][T11331] binder: 11330:11331 ioctl c0306201 2000000006c0 returned -14 [ 432.611211][ T4379] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 432.742193][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 432.801411][ T4379] usb 3-1: Using ep0 maxpacket: 32 [ 432.808736][ T4379] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.829329][ T4379] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 432.849759][ T4379] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.880329][ T4379] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 432.899469][ T4379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.917947][ T4379] usb 3-1: Product: syz [ 432.928070][ T4379] usb 3-1: Manufacturer: syz [ 432.938196][ T4379] usb 3-1: SerialNumber: syz [ 432.959558][ T4379] usb 3-1: config 0 descriptor?? [ 433.019496][T11363] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2156'. [ 433.209300][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 433.232756][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 433.272229][T11367] ip_tables: iptables: counters copy to user failed while replacing table [ 433.390830][ T4379] gs_usb 3-1:0.0: Configuring for 162 interfaces [ 433.589062][T11348] loop0: detected capacity change from 0 to 32768 [ 433.645779][T11348] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 433.715669][T11348] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 433.801233][ T4379] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 433.868175][T11348] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 433.912737][ T4379] gs_usb: probe of 3-1:0.0 failed with error -71 [ 433.958996][ T4379] usb 3-1: USB disconnect, device number 6 [ 434.198096][T11348] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 434.646482][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'. [ 434.676742][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 434.737102][T11396] ip_tables: iptables: counters copy to user failed while replacing table [ 435.217472][T11406] loop0: detected capacity change from 0 to 512 [ 435.259069][T11406] EXT4-fs error (device loop0): __ext4_iget:5102: inode #2: block 131072: comm syz.0.2174: invalid block [ 435.271929][T11390] loop1: detected capacity change from 0 to 32768 [ 435.288870][T11406] EXT4-fs (loop0): get root inode failed [ 435.364478][T11406] EXT4-fs (loop0): mount failed [ 435.381440][T11399] loop3: detected capacity change from 0 to 32768 [ 435.403795][T11399] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2172 (11399) [ 435.455637][T11390] (syz.1.2167,11390,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 435.539809][T11390] (syz.1.2167,11390,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 435.547559][T11399] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 435.643332][T11399] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 435.693252][T11399] BTRFS info (device loop3): using free space tree [ 435.716528][T11390] JBD2: Ignoring recovery information on journal [ 435.870954][T11390] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 435.922711][T11399] BTRFS info (device loop3): enabling ssd optimizations [ 436.183333][ T4284] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 437.267106][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2183'. [ 437.373593][T11459] ip_tables: iptables: counters copy to user failed while replacing table [ 437.411920][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 437.626436][T11390] syz.1.2167 (11390) used greatest stack depth: 17600 bytes left [ 438.037445][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 438.075670][T11475] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.172235][T11478] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.178560][T11475] wg0 speed is unknown, defaulting to 1000 [ 438.279336][T11478] wg0 speed is unknown, defaulting to 1000 [ 438.285297][T11475] lo speed is unknown, defaulting to 1000 [ 438.345161][T11477] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.479198][T11478] lo speed is unknown, defaulting to 1000 [ 438.485417][T11477] wg0 speed is unknown, defaulting to 1000 [ 438.596179][T11477] lo speed is unknown, defaulting to 1000 [ 439.239771][T11494] binder: 11493:11494 unknown command 1074553620 [ 439.248369][T11494] binder: 11493:11494 ioctl c0306201 2000000004c0 returned -22 [ 439.348857][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2195'. [ 439.376818][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 439.400599][T11500] ip_tables: iptables: counters copy to user failed while replacing table [ 439.889942][T11511] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4284] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11511] [ 439.913307][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.919650][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.221595][T11517] device syzkaller0 entered promiscuous mode [ 440.343746][T11499] syz.1.2187 (11499): drop_caches: 2 [ 440.421656][T11518] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.583218][T11520] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.590865][T11518] wg0 speed is unknown, defaulting to 1000 [ 440.685151][T11519] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.729755][T11518] lo speed is unknown, defaulting to 1000 [ 440.790347][T11519] wg0 speed is unknown, defaulting to 1000 [ 440.907534][T11519] lo speed is unknown, defaulting to 1000 [ 440.943641][T11520] wg0 speed is unknown, defaulting to 1000 [ 441.050087][T11520] lo speed is unknown, defaulting to 1000 [ 442.583129][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2208'. [ 442.672675][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 442.709063][T11543] ip_tables: iptables: counters copy to user failed while replacing table [ 443.290434][T11557] device syzkaller0 entered promiscuous mode [ 443.344611][T11557] tipc: Enabled bearer , priority 0 [ 443.379287][T11556] tipc: Resetting bearer [ 443.460283][T11556] tipc: Disabling bearer [ 443.851336][T11563] device syzkaller0 entered promiscuous mode [ 444.084030][T11570] xt_ipcomp: unknown flags 1D [ 444.195624][T11576] tipc: Enabling of bearer rejected, already enabled [ 444.230028][T11572] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.329289][T11572] wg0 speed is unknown, defaulting to 1000 [ 444.340244][T11578] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.434034][T11572] lo speed is unknown, defaulting to 1000 [ 444.445816][T11578] wg0 speed is unknown, defaulting to 1000 [ 444.535502][T11577] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.611722][T11578] lo speed is unknown, defaulting to 1000 [ 444.640768][T11577] wg0 speed is unknown, defaulting to 1000 [ 444.744340][T11577] lo speed is unknown, defaulting to 1000 [ 444.992163][ T4379] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 445.065921][T11583] device syzkaller0 entered promiscuous mode [ 445.195859][ T4379] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 445.215366][ T4379] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 445.232309][ T4379] usb 2-1: Product: syz [ 445.241393][ T4379] usb 2-1: Manufacturer: syz [ 445.246050][ T4379] usb 2-1: SerialNumber: syz [ 445.263328][ T4379] usb 2-1: config 0 descriptor?? [ 445.282518][ T4379] ch341 2-1:0.0: ch341-uart converter detected [ 447.031707][ T4379] usb 2-1: failed to send control message: -110 [ 447.038267][ T4379] ch341-uart: probe of ttyUSB0 failed with error -110 [ 447.309080][T11590] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2223'. [ 447.348879][T11593] device syzkaller0 entered promiscuous mode [ 447.362701][T11605] tipc: Enabled bearer , priority 0 [ 447.391525][T11586] tipc: Resetting bearer [ 447.475994][T11586] tipc: Disabling bearer [ 447.494301][ T9366] usb 2-1: USB disconnect, device number 4 [ 447.517494][ T9366] ch341 2-1:0.0: device disconnected [ 448.731071][T11622] netlink: 'syz.2.2230': attribute type 10 has an invalid length. [ 448.801569][T11622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2230'. [ 448.960897][T11622] bridge0: port 3(syz_tun) entered blocking state [ 448.967544][T11622] bridge0: port 3(syz_tun) entered forwarding state [ 449.009351][T11622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.165031][T11635] loop0: detected capacity change from 0 to 512 [ 449.201517][T11622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.303723][T11635] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 449.332302][T11635] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2235: invalid indirect mapped block 256 (level 1) [ 449.388890][T11646] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.474851][T11637] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.481597][T11646] wg0 speed is unknown, defaulting to 1000 [ 449.585268][T11643] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.602471][T11646] lo speed is unknown, defaulting to 1000 [ 449.689778][T11643] wg0 speed is unknown, defaulting to 1000 [ 449.788340][T11643] lo speed is unknown, defaulting to 1000 [ 449.794185][T11637] wg0 speed is unknown, defaulting to 1000 [ 449.905164][T11637] lo speed is unknown, defaulting to 1000 [ 449.990005][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.018357][T11635] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2235: invalid indirect mapped block 2683928664 (level 1) [ 450.078366][T11635] EXT4-fs (loop0): 1 truncate cleaned up [ 450.123624][T11635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 450.400840][T11651] device syzkaller0 entered promiscuous mode [ 450.665553][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 450.772075][T11666] device syzkaller0 entered promiscuous mode [ 450.811334][ T9366] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 451.017467][ T9366] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 451.047153][ T9366] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 451.075638][ T9366] usb 2-1: Product: syz [ 451.090147][ T9366] usb 2-1: Manufacturer: syz [ 451.099525][ T9366] usb 2-1: SerialNumber: syz [ 451.144244][ T9366] usb 2-1: config 0 descriptor?? [ 451.172304][ T9366] ch341 2-1:0.0: ch341-uart converter detected [ 451.407021][T11668] loop0: detected capacity change from 0 to 32768 [ 451.949355][T11676] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 451.949355][T11676] [ 451.963045][T11676] ERROR: (device loop0): remounting filesystem as read-only [ 452.181767][ T27] audit: type=1800 audit(1792186602.431:26): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2240" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 453.426273][ T9366] usb 2-1: failed to send control message: -110 [ 453.437553][ T9366] ch341-uart: probe of ttyUSB0 failed with error -110 [ 454.314528][T11672] tipc: Enabled bearer , priority 0 [ 454.323944][T11663] tipc: Resetting bearer [ 454.396689][ T4379] usb 2-1: USB disconnect, device number 5 [ 454.404963][ T4379] ch341 2-1:0.0: device disconnected [ 454.459252][T11663] tipc: Disabling bearer [ 454.524786][T11679] binder: 11678:11679 ioctl c0306201 200000000480 returned -14 [ 454.565943][T11679] binder_alloc: 11678: pid 11678 spamming oneway? 2 buffers allocated for a total size of 5120 [ 454.597982][T11679] binder_alloc: 11678: pid 11678 spamming oneway? 3 buffers allocated for a total size of 5128 [ 454.616519][T11682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2243'. [ 454.850390][T11690] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 454.862952][T11689] loop1: detected capacity change from 0 to 512 [ 454.898879][T11690] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2246'. [ 454.917721][T11689] EXT4-fs (loop1): invalid inodes per group: 0 [ 454.917721][T11689] [ 454.937956][T11687] loop2: detected capacity change from 0 to 512 [ 454.977503][T11693] 8021q: VLANs not supported on caif0 [ 455.117241][T11690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.420412][T11696] loop1: detected capacity change from 0 to 1024 [ 455.431250][T11696] ext4: Unknown parameter 'noacl' [ 455.983615][T11699] device syzkaller0 entered promiscuous mode [ 456.052717][T11706] device syzkaller0 entered promiscuous mode [ 456.319131][T11718] tipc: Enabled bearer , priority 0 [ 456.357924][T11715] device syzkaller0 entered promiscuous mode [ 456.401552][T11705] tipc: Resetting bearer [ 456.511994][T11705] tipc: Disabling bearer [ 456.612340][T11715] tipc: Enabled bearer , priority 0 [ 456.762019][T11712] tipc: Resetting bearer [ 456.860972][T11712] tipc: Disabling bearer [ 457.027258][T11744] 8021q: VLANs not supported on caif0 [ 457.036750][T11742] loop2: detected capacity change from 0 to 512 [ 457.084057][T11742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.2260: missing EA_INODE flag [ 457.138181][T11742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2260: error while reading EA inode 2 err=-117 [ 457.217448][T11742] EXT4-fs (loop2): 1 orphan inode deleted [ 457.233756][T11742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 457.425725][T11752] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 457.459808][T11756] loop0: detected capacity change from 0 to 256 [ 457.482866][T11752] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2263'. [ 457.534819][T11752] infiniband syz2: set active [ 457.539951][T11752] infiniband syz2: set active [ 457.645001][T11756] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 458.146244][T11752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.193968][T11752] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.228922][T11752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.288693][ T4379] lo speed is unknown, defaulting to 1000 [ 458.300259][T11453] lo speed is unknown, defaulting to 1000 [ 458.321398][T11453] lo speed is unknown, defaulting to 1000 [ 458.438176][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 458.698351][T11782] device syzkaller0 entered promiscuous mode [ 458.709205][T11782] tipc: Enabled bearer , priority 0 [ 458.723856][T11780] tipc: Resetting bearer [ 458.827291][T11785] binder: 11775:11785 ioctl c0306201 0 returned -14 [ 459.195854][T11780] tipc: Disabling bearer [ 460.301042][T11823] netlink: 'syz.4.2280': attribute type 10 has an invalid length. [ 460.331174][T11823] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2280'. [ 460.359547][T11826] loop0: detected capacity change from 0 to 512 [ 460.448733][T11823] infiniband syz2: set active [ 460.469000][T11826] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.2281: missing EA_INODE flag [ 460.513768][T11826] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2281: error while reading EA inode 2 err=-117 [ 460.539662][T11823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.581751][T11826] EXT4-fs (loop0): 1 orphan inode deleted [ 460.594256][T11826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.619315][T11453] lo speed is unknown, defaulting to 1000 [ 460.867604][T11834] binder: 11832:11834 ioctl c0306201 2000000007c0 returned -14 [ 461.491225][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 462.321752][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 462.418302][T11875] netlink: 'syz.0.2294': attribute type 10 has an invalid length. [ 462.461331][T11875] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2294'. [ 462.610077][T11881] binder: BINDER_SET_CONTEXT_MGR already set [ 462.635930][T11881] binder: 11880:11881 ioctl 4018620d 200000000780 returned -16 [ 462.671351][T11875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.679316][T11875] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.725694][T11875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.941592][T11883] ptrace attach of ""[11885] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11883] [ 463.628236][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 463.809930][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 463.864269][T11919] binder: BINDER_SET_CONTEXT_MGR already set [ 463.876053][T11919] binder: 11918:11919 ioctl 4018620d 200000000780 returned -16 [ 463.984240][T11921] netlink: 'syz.4.2309': attribute type 10 has an invalid length. [ 464.018746][T11921] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2309'. [ 464.110958][T11921] infiniband syz2: set active [ 464.152660][T11921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.219310][T11453] lo speed is unknown, defaulting to 1000 [ 464.247742][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 464.368119][T11933] loop1: detected capacity change from 0 to 512 [ 464.473564][T11933] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.2313: missing EA_INODE flag [ 464.536304][T11933] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2313: error while reading EA inode 2 err=-117 [ 464.605340][T11938] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2316'. [ 464.631663][T11933] EXT4-fs (loop1): 1 orphan inode deleted [ 464.637441][T11933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 464.737587][T11942] device syzkaller0 entered promiscuous mode [ 464.989664][T11946] device syzkaller0 entered promiscuous mode [ 465.416612][T11946] tipc: Enabled bearer , priority 0 [ 465.445021][T11943] tipc: Resetting bearer [ 465.584315][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 465.602628][T11943] tipc: Disabling bearer [ 465.934906][T11974] binder: 11973:11974 ioctl c0306201 200000000480 returned -14 [ 465.985924][T11974] binder_alloc: 11973: pid 11973 spamming oneway? 2 buffers allocated for a total size of 5120 [ 466.018883][T11974] binder_alloc: 11973: pid 11973 spamming oneway? 3 buffers allocated for a total size of 5128 [ 466.187376][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2328'. [ 466.286705][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 466.290875][T11982] ip_tables: iptables: counters copy to user failed while replacing table [ 466.518464][T11958] netlink: 'syz.2.2325': attribute type 10 has an invalid length. [ 466.541334][T11958] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2325'. [ 466.612280][T11975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.869241][T11996] loop0: detected capacity change from 0 to 512 [ 466.937438][T11996] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.2334: missing EA_INODE flag [ 466.955778][T11996] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2334: error while reading EA inode 2 err=-117 [ 466.988586][T11996] EXT4-fs (loop0): 1 orphan inode deleted [ 467.007212][T11996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 467.238881][T12011] binder: 12010:12011 ioctl c0306201 200000000480 returned -14 [ 467.253888][T12000] tipc: Enabled bearer , priority 0 [ 467.288315][T11999] tipc: Disabling bearer [ 467.891904][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2341'. [ 467.949730][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 467.957239][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 467.999104][T12017] ip_tables: iptables: counters copy to user failed while replacing table [ 468.058146][T12024] tipc: Enabling of bearer rejected, failed to enable media [ 468.161786][T12028] device syzkaller0 entered promiscuous mode [ 468.419936][T12041] xt_ipcomp: unknown flags 1D [ 468.468813][T12045] binder: 12044:12045 ioctl c0306201 200000000480 returned -14 [ 468.479345][T12043] device syzkaller0 entered promiscuous mode [ 468.493935][T12041] tipc: Enabling of bearer rejected, already enabled [ 468.510495][T12045] binder_alloc: 12044: pid 12044 spamming oneway? 2 buffers allocated for a total size of 5120 [ 468.648398][T12047] device syzkaller0 entered promiscuous mode [ 468.658099][T12047] tipc: Enabled bearer , priority 0 [ 468.672498][T12046] tipc: Resetting bearer [ 468.731772][T12046] tipc: Disabling bearer [ 468.934307][T12054] loop0: detected capacity change from 0 to 8 [ 469.035228][T12055] rxe_eth0 speed is unknown, defaulting to 1000 [ 469.127558][T12055] wg0 speed is unknown, defaulting to 1000 [ 469.133490][T12057] rxe_eth0 speed is unknown, defaulting to 1000 [ 469.231877][T12055] lo speed is unknown, defaulting to 1000 [ 469.246813][T12057] wg0 speed is unknown, defaulting to 1000 [ 469.274976][T12058] rxe_eth0 speed is unknown, defaulting to 1000 [ 469.443681][T12058] wg0 speed is unknown, defaulting to 1000 [ 469.449564][T12057] lo speed is unknown, defaulting to 1000 [ 469.558853][T12058] lo speed is unknown, defaulting to 1000 [ 469.653704][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2358'. [ 469.742012][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 469.794105][T12064] ip_tables: iptables: counters copy to user failed while replacing table [ 469.812741][T12054] SQUASHFS error: xz decompression failed, data probably corrupt [ 469.826253][T12065] loop4: detected capacity change from 0 to 512 [ 469.834062][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 469.863615][T12054] SQUASHFS error: Failed to read block 0xa8: -5 [ 469.913279][T12065] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.2360: missing EA_INODE flag [ 469.955704][T12065] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2360: error while reading EA inode 2 err=-117 [ 470.020601][T12054] SQUASHFS error: xz decompression failed, data probably corrupt [ 470.021017][T12065] EXT4-fs (loop4): 1 orphan inode deleted [ 470.035075][T12065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 470.065080][T12054] SQUASHFS error: Failed to read block 0xa8: -5 [ 470.154952][ T27] audit: type=1800 audit(1792186620.591:27): pid=12054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2355" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 470.831847][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 472.183305][T12095] device syzkaller0 entered promiscuous mode [ 472.351828][T12106] device syzkaller0 entered promiscuous mode [ 472.368254][T12092] tipc: Enabled bearer , priority 0 [ 472.434242][T12091] tipc: Resetting bearer [ 472.542914][T12091] tipc: Disabling bearer [ 472.760266][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2373'. [ 472.796478][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 472.823277][T12123] ip_tables: iptables: counters copy to user failed while replacing table [ 472.895660][T12127] 8021q: VLANs not supported on caif0 [ 472.921693][T12126] binder: 12124:12126 unknown command 1074553619 [ 472.952961][T12126] binder: 12124:12126 ioctl c0306201 2000000000c0 returned -22 [ 473.048180][T12131] SET target dimension over the limit! [ 473.239366][T12138] device syzkaller0 entered promiscuous mode [ 473.392893][T12142] device syzkaller0 entered promiscuous mode [ 473.504502][T12145] device syzkaller0 entered promiscuous mode [ 473.575210][T12147] device syzkaller0 entered promiscuous mode [ 473.608826][T12145] tipc: Enabled bearer , priority 0 [ 473.627049][T12147] tipc: Enabled bearer , priority 0 [ 473.644205][T12144] tipc: Resetting bearer [ 473.717232][T12144] tipc: Disabling bearer [ 473.824104][T12146] tipc: Resetting bearer [ 473.932660][T12146] tipc: Disabling bearer [ 473.947335][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2387'. [ 473.957781][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 473.989739][T12153] rxe_eth0 speed is unknown, defaulting to 1000 [ 474.089058][T12153] wg0 speed is unknown, defaulting to 1000 [ 474.099218][T12159] rxe_eth0 speed is unknown, defaulting to 1000 [ 474.205523][T12159] wg0 speed is unknown, defaulting to 1000 [ 474.211460][T12156] rxe_eth0 speed is unknown, defaulting to 1000 [ 474.271428][T12153] lo speed is unknown, defaulting to 1000 [ 474.379635][T12159] lo speed is unknown, defaulting to 1000 [ 474.408780][T12156] wg0 speed is unknown, defaulting to 1000 [ 474.510578][T12156] lo speed is unknown, defaulting to 1000 [ 474.602001][T12154] ip_tables: iptables: counters copy to user failed while replacing table [ 474.612200][T12157] 8021q: VLANs not supported on caif0 [ 475.143160][T12176] device syzkaller0 entered promiscuous mode [ 475.162208][T12178] loop2: detected capacity change from 0 to 512 [ 475.252239][T12178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 475.296199][T12178] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.353952][T12178] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 3: comm syz.2.2397: lblock 8 mapped to illegal pblock 3 (length 26) [ 475.397339][T12186] device syzkaller0 entered promiscuous mode [ 475.427697][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 475.455367][T12186] tipc: Enabled bearer , priority 0 [ 475.473452][T12185] tipc: Resetting bearer [ 475.530238][T12185] tipc: Disabling bearer [ 475.559896][T12191] binder: 12190:12191 ioctl 4018620d 0 returned -22 [ 475.567690][T12191] binder: 12190:12191 ioctl c0306201 200000000180 returned -11 [ 475.629569][T12189] device syzkaller0 entered promiscuous mode [ 475.697372][T12189] tipc: Enabled bearer , priority 0 [ 475.738771][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 475.759086][T12198] 8021q: VLANs not supported on caif0 [ 475.795330][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 475.820335][T12196] ip_tables: iptables: counters copy to user failed while replacing table [ 475.849383][T12188] tipc: Resetting bearer [ 475.913619][T12188] tipc: Disabling bearer [ 476.011593][T12202] loop0: detected capacity change from 0 to 164 [ 476.378344][T12216] device syzkaller0 entered promiscuous mode [ 476.560377][T12220] device syzkaller0 entered promiscuous mode [ 476.578366][T12224] 8021q: VLANs not supported on caif0 [ 476.649193][T12220] tipc: Enabled bearer , priority 0 [ 476.679192][T12219] tipc: Resetting bearer [ 476.755163][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2416'. [ 476.766387][T12219] tipc: Disabling bearer [ 476.773253][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 476.791941][T12228] ip_tables: iptables: counters copy to user failed while replacing table [ 476.856913][T12229] device syzkaller0 entered promiscuous mode [ 476.886229][T12229] tipc: Enabled bearer , priority 0 [ 477.200614][T12227] tipc: Resetting bearer [ 477.266814][T12227] tipc: Disabling bearer [ 477.472366][T12253] binder: BC_ACQUIRE_RESULT not supported [ 477.478430][T12253] binder: 12251:12253 ioctl c0306201 200000000300 returned -22 [ 477.582827][T12255] 8021q: VLANs not supported on caif0 [ 477.667565][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'. [ 477.692152][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2431'. [ 477.730717][T12261] device syzkaller0 entered promiscuous mode [ 477.732227][ T4374] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 477.745370][T12257] ip_tables: iptables: counters copy to user failed while replacing table [ 477.818695][T12261] tipc: Enabled bearer , priority 0 [ 477.872315][T12260] tipc: Resetting bearer [ 477.942251][ T4374] usb 3-1: Using ep0 maxpacket: 32 [ 477.954552][ T4374] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 477.972046][T12260] tipc: Disabling bearer [ 477.977841][ T4374] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 477.998256][ T4374] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.013926][ T4374] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 478.033673][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.051145][ T4374] usb 3-1: Product: syz [ 478.061468][ T4374] usb 3-1: Manufacturer: syz [ 478.071325][ T4374] usb 3-1: SerialNumber: syz [ 478.102884][ T4374] usb 3-1: config 0 descriptor?? [ 478.159418][T12273] device syzkaller0 entered promiscuous mode [ 478.169669][T12273] tipc: Enabled bearer , priority 0 [ 478.178358][T12271] tipc: Resetting bearer [ 478.230033][T12271] tipc: Disabling bearer [ 478.447359][T12279] device syzkaller0 entered promiscuous mode [ 478.526726][ T4374] gs_usb 3-1:0.0: Configuring for 162 interfaces [ 478.635651][T12288] loop1: detected capacity change from 0 to 512 [ 478.708699][T12288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 478.721555][T12288] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.889215][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 479.179279][T12306] xt_ipcomp: unknown flags 1D [ 481.305343][T12284] 8021q: VLANs not supported on caif0 [ 481.319543][ T4374] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 481.328364][T12312] tipc: Enabling of bearer rejected, already enabled [ 481.339401][T12307] device syzkaller0 entered promiscuous mode [ 481.384815][T12320] tipc: Enabled bearer , priority 0 [ 481.401022][T12301] tipc: Resetting bearer [ 481.431585][ T4374] gs_usb: probe of 3-1:0.0 failed with error -71 [ 481.469634][ T4374] usb 3-1: USB disconnect, device number 7 [ 481.518494][T12301] tipc: Disabling bearer [ 481.747262][T12350] netlink: 'syz.3.2458': attribute type 10 has an invalid length. [ 481.767190][T12350] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2458'. [ 481.940802][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.989315][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.023620][T12350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.130867][T12364] 8021q: VLANs not supported on caif0 [ 482.156565][T12365] xt_ipcomp: unknown flags 1D [ 482.197994][T12365] tipc: Enabling of bearer rejected, already enabled [ 482.311839][ T4434] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 482.458185][T12368] device syzkaller0 entered promiscuous mode [ 482.508087][T12376] device syzkaller0 entered promiscuous mode [ 482.514545][ T4434] usb 3-1: Using ep0 maxpacket: 32 [ 482.522905][ T4434] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 482.557220][ T4434] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 482.586150][ T4434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 482.609212][ T4434] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 482.636003][ T4434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.659805][ T4434] usb 3-1: Product: syz [ 482.697914][ T4434] usb 3-1: Manufacturer: syz [ 482.718746][ T4434] usb 3-1: SerialNumber: syz [ 482.732063][ T4434] usb 3-1: config 0 descriptor?? [ 483.159394][ T4434] gs_usb 3-1:0.0: Configuring for 162 interfaces [ 484.881717][T12370] tipc: Enabled bearer , priority 0 [ 484.908476][T12369] tipc: Resetting bearer [ 484.988993][T12369] tipc: Disabling bearer [ 485.050544][ T4434] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 485.099700][T12406] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 485.129344][T12406] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2475'. [ 485.300028][T12409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.317821][ T4434] gs_usb: probe of 3-1:0.0 failed with error -71 [ 485.339883][ T4434] usb 3-1: USB disconnect, device number 8 [ 485.371888][T12411] 8021q: VLANs not supported on caif0 [ 485.515748][T12416] xt_ipcomp: unknown flags 1D [ 486.026674][T12416] tipc: Enabling of bearer rejected, already enabled [ 486.471287][ T4374] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 486.609576][T12434] device syzkaller0 entered promiscuous mode [ 486.666470][ T4374] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 486.688237][ T4374] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 486.706817][ T4374] usb 1-1: Product: syz [ 486.715990][ T4374] usb 1-1: Manufacturer: syz [ 486.727521][ T4374] usb 1-1: SerialNumber: syz [ 486.737749][T12440] device syzkaller0 entered promiscuous mode [ 486.748994][ T4374] usb 1-1: config 0 descriptor?? [ 486.770626][ T4374] ch341 1-1:0.0: ch341-uart converter detected [ 486.885659][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2490'. [ 486.896278][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 486.906941][T12444] ip_tables: iptables: counters copy to user failed while replacing table [ 488.471419][ T4374] usb 1-1: failed to send control message: -110 [ 488.491911][ T4374] ch341-uart: probe of ttyUSB0 failed with error -110 [ 489.012516][T12440] tipc: Enabled bearer , priority 0 [ 489.019397][T12442] 8021q: VLANs not supported on caif0 [ 489.029959][T12439] tipc: Resetting bearer [ 489.040293][ T4434] usb 1-1: USB disconnect, device number 5 [ 489.067085][ T4434] ch341 1-1:0.0: device disconnected [ 489.099171][T12439] tipc: Disabling bearer [ 489.246353][T12453] netlink: 'syz.3.2493': attribute type 10 has an invalid length. [ 489.271283][T12453] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2493'. [ 489.402036][T12457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.824086][T12477] 8021q: VLANs not supported on caif0 [ 489.899186][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2503'. [ 489.969794][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 490.001889][T12480] ip_tables: iptables: counters copy to user failed while replacing table [ 490.088936][T12483] device syzkaller0 entered promiscuous mode [ 490.114158][T12483] tipc: Enabled bearer , priority 0 [ 490.134900][T12482] tipc: Resetting bearer [ 490.214189][T12482] tipc: Disabling bearer [ 490.753930][T12513] loop1: detected capacity change from 0 to 8 [ 491.165875][T12513] SQUASHFS error: zlib decompression failed, data probably corrupt [ 491.174537][T12513] SQUASHFS error: Failed to read block 0x9b: -5 [ 491.180875][T12513] SQUASHFS error: Unable to read metadata cache entry [99] [ 491.188382][T12513] SQUASHFS error: Unable to read inode 0x127 [ 491.554557][T12179] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.867228][T12506] syz.0.2511 (12506): drop_caches: 2 [ 491.919027][T12521] 8021q: VLANs not supported on caif0 [ 492.009580][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 492.034097][T12526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.055995][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 492.072326][T12525] ip_tables: iptables: counters copy to user failed while replacing table [ 492.849571][T12549] loop2: detected capacity change from 0 to 2048 [ 492.872228][T12549] UDF-fs: bad mount option "" or missing value [ 493.175279][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'. [ 493.191220][T12565] binder: 12560:12565 ioctl c0306201 200000000480 returned -14 [ 493.307812][T12565] binder_alloc: 12560: binder_alloc_buf, no vma [ 493.386537][T12561] 8021q: VLANs not supported on nlmon0 [ 493.397010][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 493.667542][T12570] ip_tables: iptables: counters copy to user failed while replacing table [ 494.258047][T12593] loop4: detected capacity change from 0 to 512 [ 494.365428][T12593] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 495.429579][T12604] binder: 12602:12604 ioctl c0306201 200000000480 returned -14 [ 495.463739][T12601] device syzkaller0 entered promiscuous mode [ 495.610982][T12601] tipc: Enabled bearer , priority 0 [ 495.670574][T12600] tipc: Resetting bearer [ 495.687489][T12593] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 495.769690][T12600] tipc: Disabling bearer [ 495.785314][T12612] 8021q: VLANs not supported on caif0 [ 495.994243][T12617] loop3: detected capacity change from 0 to 512 [ 496.213239][T12617] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 496.282193][T12617] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2546: invalid indirect mapped block 256 (level 1) [ 496.297639][T12622] device syzkaller0 entered promiscuous mode [ 496.418408][T12617] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2546: invalid indirect mapped block 2683928664 (level 1) [ 496.501547][T12617] EXT4-fs (loop3): 1 truncate cleaned up [ 496.511344][T12617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 496.532152][T12622] tipc: Enabled bearer , priority 0 [ 496.683231][T12618] tipc: Resetting bearer [ 496.748948][T12627] loop1: detected capacity change from 0 to 2048 [ 496.881738][T12627] UDF-fs: bad mount option "" or missing value [ 496.906293][T12618] tipc: Disabling bearer [ 496.952934][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 497.778243][T12653] binder: 12651:12653 ioctl c0306201 200000000480 returned -14 [ 498.228367][T12676] device syzkaller0 entered promiscuous mode [ 498.310310][T12676] tipc: Enabled bearer , priority 0 [ 498.335914][T12675] tipc: Resetting bearer [ 498.407765][T12675] tipc: Disabling bearer [ 499.525290][T12692] device syzkaller0 entered promiscuous mode [ 499.592373][T12700] binder: 12698:12700 ioctl c0306201 200000000480 returned -14 [ 500.379713][T12723] mmap: syz.3.2568 (12723) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 500.400022][T12723] [ 500.402409][T12723] ====================================================== [ 500.409440][T12723] WARNING: possible circular locking dependency detected [ 500.416473][T12723] syzkaller #0 Not tainted [ 500.420916][T12723] ------------------------------------------------------ [ 500.427932][T12723] syz.3.2568/12723 is trying to acquire lock: [ 500.434005][T12723] ffff88805343bb60 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 500.444880][T12723] [ 500.444880][T12723] but task is already holding lock: [ 500.452256][T12723] ffff88801d7fbd58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 500.462435][T12723] [ 500.462435][T12723] which lock already depends on the new lock. [ 500.462435][T12723] [ 500.472867][T12723] [ 500.472867][T12723] the existing dependency chain (in reverse order) is: [ 500.481906][T12723] [ 500.481906][T12723] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 500.489504][T12723] down_read_killable+0x4c/0x340 [ 500.495075][T12723] mmap_read_lock_killable+0x1d/0x60 [ 500.500923][T12723] lock_mm_and_find_vma+0x2b1/0x2f0 [ 500.506647][T12723] do_user_addr_fault+0x2e8/0xb20 [ 500.512287][T12723] exc_page_fault+0x60/0x100 [ 500.517499][T12723] asm_exc_page_fault+0x22/0x30 [ 500.522888][T12723] fault_in_readable+0x13e/0x1f0 [ 500.528439][T12723] fault_in_iov_iter_readable+0xbf/0x2f0 [ 500.534670][T12723] generic_perform_write+0x1f1/0x5c0 [ 500.540578][T12723] __generic_file_write_iter+0x148/0x2a0 [ 500.546748][T12723] generic_file_write_iter+0xab/0x2e0 [ 500.552671][T12723] vfs_write+0x482/0x9a0 [ 500.557553][T12723] ksys_write+0x14d/0x260 [ 500.562427][T12723] do_syscall_64+0x4c/0xa0 [ 500.567408][T12723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.573857][T12723] [ 500.573857][T12723] -> #0 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}: [ 500.582584][T12723] __lock_acquire+0x3a03/0x7ea0 [ 500.588039][T12723] lock_acquire+0x1bc/0x4a0 [ 500.593103][T12723] down_write+0x36/0x60 [ 500.597814][T12723] process_measurement+0x3af/0x1c40 [ 500.603553][T12723] ima_file_mmap+0xe9/0x140 [ 500.608634][T12723] __se_sys_remap_file_pages+0x55a/0x7b0 [ 500.614811][T12723] do_syscall_64+0x4c/0xa0 [ 500.619783][T12723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.626221][T12723] [ 500.626221][T12723] other info that might help us debug this: [ 500.626221][T12723] [ 500.636468][T12723] Possible unsafe locking scenario: [ 500.636468][T12723] [ 500.643916][T12723] CPU0 CPU1 [ 500.649281][T12723] ---- ---- [ 500.654655][T12723] lock(&mm->mmap_lock); [ 500.659022][T12723] lock(&sb->s_type->i_mutex_key#14); [ 500.667013][T12723] lock(&mm->mmap_lock); [ 500.673875][T12723] lock(&sb->s_type->i_mutex_key#14); [ 500.679371][T12723] [ 500.679371][T12723] *** DEADLOCK *** [ 500.679371][T12723] [ 500.687516][T12723] 1 lock held by syz.3.2568/12723: [ 500.692633][T12723] #0: ffff88801d7fbd58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 500.703173][T12723] [ 500.703173][T12723] stack backtrace: [ 500.709079][T12723] CPU: 1 PID: 12723 Comm: syz.3.2568 Not tainted syzkaller #0 [ 500.716551][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.726636][T12723] Call Trace: [ 500.729917][T12723] [ 500.732866][T12723] dump_stack_lvl+0x188/0x24e [ 500.737595][T12723] ? load_image+0x410/0x410 [ 500.742175][T12723] ? show_regs_print_info+0x12/0x12 [ 500.747408][T12723] ? print_circular_bug+0x12b/0x1a0 [ 500.752632][T12723] check_noncircular+0x2f8/0x400 [ 500.757607][T12723] ? look_up_lock_class+0x75/0x140 [ 500.762731][T12723] ? print_deadlock_bug+0x5d0/0x5d0 [ 500.767955][T12723] ? lockdep_lock+0x15c/0x1f0 [ 500.772668][T12723] ? _find_first_zero_bit+0xd2/0x100 [ 500.777993][T12723] __lock_acquire+0x3a03/0x7ea0 [ 500.782869][T12723] ? __lock_acquire+0x7ea0/0x7ea0 [ 500.787927][T12723] ? verify_lock_unused+0x140/0x140 [ 500.793173][T12723] ? ima_match_policy+0x10d/0x21b0 [ 500.798355][T12723] ? ima_match_policy+0x211c/0x21b0 [ 500.803568][T12723] lock_acquire+0x1bc/0x4a0 [ 500.808117][T12723] ? process_measurement+0x3af/0x1c40 [ 500.813537][T12723] ? __might_sleep+0xd0/0xd0 [ 500.818324][T12723] ? read_lock_is_recursive+0x10/0x10 [ 500.823730][T12723] ? ima_get_action+0x71/0xa0 [ 500.828414][T12723] down_write+0x36/0x60 [ 500.832597][T12723] ? process_measurement+0x3af/0x1c40 [ 500.838005][T12723] process_measurement+0x3af/0x1c40 [ 500.843227][T12723] ? ima_file_mmap+0x140/0x140 [ 500.848015][T12723] ? aa_file_perm+0x112/0xf00 [ 500.852721][T12723] ? mtree_load+0x100/0xa70 [ 500.857307][T12723] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 500.863545][T12723] ima_file_mmap+0xe9/0x140 [ 500.868080][T12723] ? ima_file_free+0x3e0/0x3e0 [ 500.872896][T12723] ? common_file_perm+0x171/0x1c0 [ 500.877974][T12723] ? bpf_lsm_mmap_file+0x5/0x10 [ 500.882952][T12723] ? security_mmap_file+0x11b/0x180 [ 500.888284][T12723] __se_sys_remap_file_pages+0x55a/0x7b0 [ 500.893947][T12723] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 500.899719][T12723] ? lock_chain_count+0x20/0x20 [ 500.904582][T12723] ? lockdep_hardirqs_on+0x94/0x140 [ 500.909790][T12723] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 500.915541][T12723] do_syscall_64+0x4c/0xa0 [ 500.919991][T12723] ? clear_bhb_loop+0x60/0xb0 [ 500.924703][T12723] ? clear_bhb_loop+0x60/0xb0 [ 500.929424][T12723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.935346][T12723] RIP: 0033:0x7f8c9df9e559 [ 500.939787][T12723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.959434][T12723] RSP: 002b:00007f8c9edc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 500.967873][T12723] RAX: ffffffffffffffda RBX: 00007f8c9e226180 RCX: 00007f8c9df9e559 [ 500.975860][T12723] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000005fd000 [ 500.983859][T12723] RBP: 00007f8c9e0358b0 R08: 0000000000000020 R09: 0000000000000000 [ 500.991859][T12723] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 500.999864][T12723] R13: 00007f8c9e226218 R14: 00007f8c9e226180 R15: 00007ffee700d908 [ 501.007847][T12723] [ 501.357112][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.363648][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.614529][T12709] device syzkaller0 entered promiscuous mode